|
ntdll.dll 概観
ファイルntdll.dll は次のソフトウェアで含まれている- Windows XP Home Edition, Deutsch より多くの情報
版: 5.1.2600.1217
ファイル日付: 2003-05-02 01:56:34
ファイルサイズ: 679.936 バイト
ファイル道: C:\WINDOWS\system32\ntdll.dll
ショーntdll.dll の細部 - Windows XP Home Edition, Deutsch より多くの情報
版: 5.1.2600.1106
ファイル日付: 2002-08-29 14:00:00
ファイルサイズ: 694.272 バイト
ファイル道: C:\WINDOWS\I386\SYSTEM32\ntdll.dll
ショーntdll.dll の細部
ntdll.dll は次のレポートで見つけられた:
|
|
|---|
Microsoft Windows 2000 WebDAV / ntdll.dll Buffer Overflow Vulnerability |
|---|
Microsoft Windows 2000 WebDAV / ntdll.dll Buffer Overflow Vulnerability...
...data is supplied to the WebDAV component, it is, in turn, passed to the vulnerable ntdll.dll system component. The ntdll.dll fails to perform...
...Symantec Intruder Alert policy contains a rule that detects attempts to overflow the ntdll.dll system component of WebDAV....
源: http://securityresponse.symantec.com/avcenter/security/Content/3.17.2003.html |
|---|
Symantec NetRecon 3.6 Security Update 2 |
|---|
Symantec NetRecon checks for the Windows 2000 ntdll.dll buffer overflow vulnerability, four additional Microsoft SQL Server vulnerabilities,...
...New Vulnerability Checks Microsoft Windows 2000 ntdll.dll Buffer Overflow Vulnerability...
...code execution is possible. The Windows 2000 library ntdll.dll includes a function that does not perform sufficient bounds checking....
...The vector allows for the vulnerability in ntdll.dll to be exploited by a remote attacker....
源: http://securityresponse.symantec.com/avcenter/security/Content/2003.03.26.html |
|---|
W64.Shruggle.1318 |
|---|
取り外しの指示
...following three libraries: Ntdll.dll Sfc_os.dll...
...Kernel32.dll From Ntdll.dll, the virus uses the following functions:...
源: http://securityresponse.symantec.com/avcenter/venc/data/w64.shruggle.1318.html |
|---|
W64.Rugrat.3344 |
|---|
技術的詳細
...three different libraries: NTDLL.DLL SFC_OS.DLL...
...KERNEL32 From NTDLL.DLL, the virus uses these functions:...
源: http://securityresponse.symantec.com/avcenter/venc/data/w64.rugrat.3344.html |
|---|
Trojan.Kaht |
|---|
Trojan.Kaht について
...Many applications use the vulnerable Win32 API component, ntdll.dll, so other attack vectors may exist....
技術的詳細
...The IIS WebDAV uses a core Windows system component, ntdll.dll, containing an unchecked buffer when processing the incoming WebDAV requests....
源: http://securityresponse.symantec.com/avcenter/venc/data/trojan.kaht.html |
|---|
Intruder Alert 3.6 W2K_MS_IIS_WebDAV Policy |
|---|
This policy contains a rule that detects attempts to overflow the ntdll.dll system component of WebDAV (Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability....
源: http://securityresponse.symantec.com/avcenter/security/Content/2003.03.18a.html |
|---|
W32.Gaobot.gen!poly |
|---|
技術的詳細
...The worm may hook the NTQuerySystemInformation API on NTDLL.DLL in an attempt to hide itself....
源: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.polybot.html |
|---|
Backdoor.HackDefender |
|---|
技術的詳細
...closesocket ntdll.dll NtQuerySystemInformation...
源: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.hackdefender.html |
|---|
W32.HLLW.Gaobot.JB |
|---|
取り外しの指示
...The PSAPI.DLL file is linked to missing export NTDLL.DLL:NtCreateProfile Revision History:...
......
源: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.jb.html |
|---|
|
|
![[filename.info logo]](/img/logo.png){kind=logo}
![[cn ntdll.dll]](/img/nix.gif){kind=small}
