WININET CHttpHeaderParser::ParseStatusLine Out-Of-Bounds Read
Posted by deepcore on November 12, 2016 – 1:59 am
A specially crafted HTTP response can cause the CHttpHeaderParser::ParseStatusLine method in WININET to read data beyond the end of a buffer. The size of the read can be controlled through the HTTP response. An attacker that is able to get any application that uses WININET to make a request to a server under his/her control may be able to disclose information stored after this memory block. This includes Microsoft Internet Explorer.
Post a reply
You must be logged in to post a comment.