#######################################################################

                             Luigi Auriemma

Applicazione: ShixxNOTE 6.net
              http://www.ShixxNOTE.com
Versioni:     6.net, non esiste una versione o build specifica ma
              l'ultimo cambiamento in Readme.txt (una specie di
              changelog) e' il 117
Piattaforme:  Windows
Bug:          buffer-overflow
Exploitation: remoto
Data:         13 Ottobre 2004
Autore:       Luigi Auriemma
              e-mail: aluigi@autistici.org
              web:    aluigi.org


#######################################################################


1) Introduzione
2) Bug
3) The Code
4) Fix


#######################################################################

===============
1) Introduzione
===============


Dall'autore:

"ShixxNOTE 6.net is a personal organizer, desktop sticky notes
(post-it) program, instant messaging application (LAN messanger) and a
communications tool used across a local network (Intranet), Internet
and via email. Perfect and ideal tool for your LAN or office
communication."


#######################################################################

======
2) Bug
======


Esiste un buffer-overflow nel campo riguardante il font da utilizzare
nei messaggi inviati da ShixxNOTE.
Se tale campo contiene piu' di 1698 bytes, l'indirizzo di ritorno viene
sovrascritto completamente.


#######################################################################

===========
3) The Code
===========


http://aluigi.org/poc/shixxbof.zip


#######################################################################

======
4) Fix
======


No fix.
L'autore non e' sicuro se rilasciera' una nuova versione.

UPDATE 27 Dec 2006:
The author has released a patched version (build 125)


#######################################################################