Listbox/Comboboxes in Windows not Safe

[anphanax]

http://www.k-otik.net/exploits/11.14.MS03-045.cpp.php
This one's kind of clever.

I'm not entirely sure what they're talking about,
but I believe it has to do with inserting shellcode
using addresses returned with LB_DIR and CD_DIR
messages. (SendMessage\PostMessage API Constants)

[ November 29, 2003: Message edited by: anphanax ]