G.C. junction

Discovered bugs and vulnerabilities

FireFox 2.0.0.11 and Opera 9.50 beta Remote Memory Information Leak (this vuln was also found in Apple Safari and Apple Mac OS X) (BID 29513, BID 29412, BID 27947, BID 27826, BID 26937)
SDL_Image 1.2.6 GIF Buffer Overflow (BID 27417)
Opera 9.50 beta and prior BMP RLE8 Remote DoS (BID 26721)
X-Diesel Unreal Commander v.092 (build 573) multiple FTP-based vulnerabilities (BID 25583)
Total Commander 7.01 Remote FTP Client Traversal (BID 25581)
Magellan Explorer 3.32 Remote FTP Client Traversal
Blizzard StarCraft Brood War 1.15.1 Remote DoS (BID 25478)
X-Diesel Unreal Commander v0.92 (build 573) multiple vulnerabilities
Fileinfo 2.0.9 multiple vulnerabilities (BID 25373)

Where now ?

G.C. TechBlog @ UW-Blog (Polish)
Homepage of Gynvael Coldwind (Polish)
Blog @ OpenRCE.org (English)
Security blog @ Hispasec (English)
Vexillium Site (English)

Other stuff

Photos from CONFidence 2008 *new*
Wroclaw's Computer Security Meetings page (currently offline ;<)

Contact

mailto: gynvael _AT_ coldwind _DOT_ pl
irc: Gynvael @ irc://ircnet.pl/#uw-team