CVE-2003-0897

"Shatter" vulnerability in CommCtl32.dll in Windows XP may allow local users to execute arbitrary code by sending 1 BCMGETTEXTMARGIN or 2 BCMSETTEXTMARGIN button control messages to privileged applications...

shatterCommCtrl.txt

Intro ----- Brett Moore from Security Assesment put me onto this one. XP's Visual Styles, the feature that makes various controls in Windows XP look a less dated, also introduce a new shatter type vulnerability into the OS. Vuln ------- Applications which have the new XPified appearance use...

CVE-2003-0897

The CVE-2003-0897 entry describes a local code-execution vulnerability in Windows XP related to CommCtl32.dll. The flaw arises when an attacker can send BCM_GETTEXTMARGIN or BCM_SETTEXTMARGIN button control messages to privileged applications, enabling arbitrary code execution on the affected sys...

CVE-2003-0897

"Shatter" vulnerability in CommCtl32.dll in Windows XP may allow local users to execute arbitrary code by sending 1 BCMGETTEXTMARGIN or 2 BCMSETTEXTMARGIN button control messages to privileged applications...

CVE-2003-0897: Undefined Security Weakness

"Shatter" vulnerability in CommCtl32.dll in Windows XP may allow local users to execute arbitrary code by sending 1 BCMGETTEXTMARGIN or 2 BCMSETTEXTMARGIN button control messages to privileged applications...

Shatter XP

Intro ----- Brett Moore from Security Assesment put me onto this one. XP's Visual Styles, the feature that makes various controls in Windows XP look a less dated, also introduce a new shatter type vulnerability into the OS. Vuln ------- Applications which have the new XPified appearance use...