Re: [Owasp-delhi] Security Testing of .wmv files

2010-08-02 Thread megha anand
Yup, Chintan I'm talking about vulnerabilities which are caused while processing WMV files. Even malicious input is not dangerous until its processed. Hope it helps. Thanks, Megha On Mon, Aug 2, 2010 at 6:09 PM, chintan dave wrote: > Hi Megha, > > I did not understand the intent of this questio

Re: [Owasp-delhi] Security Testing of .wmv files

2010-08-02 Thread chintan dave
Hi Megha, I did not understand the intent of this question completely. To my knowledge WMV files are data files. Why would you like to do a security assessment of a data file? The program that executes this data file (also commonly referred to as "loader") is subject to security assessment. WMV

Re: [Owasp-delhi] Security Testing of .wmv files

2010-08-02 Thread marcandre . laverdiere
Valgrind would detect memory leaks.What do you mean by memory corruption exactly?Marc-Andre Laverdiere-PapineauSoftware Security ResearcherInnovation LabsTata Consultancy ServicesPlot No 1, Survey No. 64/2, Software Units LayoutSerilingampally Mandal, MadhapurHyderabad - 500034,Andhra PradeshIndia

Re: [Owasp-delhi] Security Testing of .wmv files

2010-08-02 Thread megha anand
Thanks everyone, Anyone having idea about .WMV memory corruption. How to check it? Thanks, Megha On Mon, Aug 2, 2010 at 9:35 AM, Gunwant Singh wrote: > Besides what you have been told, you can use hex editors to open the .wmv > files. This may help you in verifying if there is any hardcoded