Microsoft Windows XP - 'explorer.exe .tiff' Image Denial of Service

source: https://www.securityfocus.com/bid/11202/info Explorer.exe that ships with Microsoft Windows XP prior to Windows XP SP2 is reported prone to a denial of service vulnerability. The vulnerability is reported to exist when Explorer.exe handles certain TIFF format images. A remote attacker may...

Microsoft Windows XP - explorer.exe .tiff Image Denial of Service

Microsoft Windows XP - explorer.exe .tiff Image Denial of Service source: https://www.securityfocus.com/bid/11202/info Explorer.exe that ships with Microsoft Windows XP prior to Windows XP SP2 is reported prone to a denial of service vulnerability. The vulnerability is reported to exist when...

CVE-1999-1365: Undefined Security Weakness

Windows NT searches a user's home directory %systemroot% by default before other directories to find critical programs such as NDDEAGNT.EXE, EXPLORER.EXE, USERINIT.EXE or TASKMGR.EXE, which could allow local users to bypass access restrictions or gain privileges by placing a Trojan horse program...

Microsoft Windows XP/2000/NT 4.0 - Shell Long Share Name Buffer Overrun

source: https://www.securityfocus.com/bid/10213/info Microsoft Windows operating systems have been reported to be prone to a remotely exploitable buffer overrun condition. This issue is exposed when a client attempts to connect to an SMB share with an overly long name. This may cause explorer.exe...

Windows XP explorer.exe heap overflow.

Vulnerability in XP explorer.exe image loading ---------------------------------------------- Systems affected: Current XP - others not tested. Degree: Arbitrary code execution. Summary ------- A malformed .emf Enhanced Metafile, a graphics format file can cause an exploitable heap overflow in or...

CVE-2003-0306

Buffer overflow in EXPLORER.EXE on Windows XP allows attackers to execute arbitrary code as the XP user via a desktop.ini file with a long .ShellClassInfo parameter...

Microsoft Windows XP - explorer.exe Local Buffer Overflow

Microsoft Windows XP - explorer.exe Local Buffer Overflow include include include include include char shellcode= //download url and exec shellcode //doesn't have any hardcoded values //except the base address of the program //searches the import table for //LoadLibraryA, GetProcAddress and...

Microsoft Windows XP - 'explorer.exe' Local Buffer Overflow

include include include include include char shellcode= //download url and exec shellcode //doesn't have any hardcoded values //except the base address of the program //searches the import table for //LoadLibraryA, GetProcAddress and ExitProcess. //by .einstein., dH team...

Buffer overflow in Explorer.exe

This bug allow a malicious an attacker to execute data with privileges of a user that is browsing the hard disk with explorer. tested against winxp SP1 example code provided. / Buffer Overflow in explorer.exe - Proof of Concept Tested only against: Windows XP SP1 Found by [email protected] Saludos...

CVE-2003-0306

Summary: CVE-2003-0306 is a buffer overflow in Windows XP’s EXPLORER.EXE triggered by a specially crafted desktop.ini containing a long .ShellClassInfo parameter, allowing arbitrary code execution as the logged-in XP user. The issue is detailed in multiple sources and is tied to the MS03-027 bull...

CVE-2003-0306: Undefined Security Weakness

Buffer overflow in EXPLORER.EXE on Windows XP allows attackers to execute arbitrary code as the XP user via a desktop.ini file with a long .ShellClassInfo parameter...

Переполнение буфера в explorer.exe (buffer overflow)

Переполнение кода при обработке некорректно деинсталлированных приложений...

Microsoft Windows XP - .Manifest Denial of Service

Microsoft Windows XP - .Manifest Denial of Service source: https://www.securityfocus.com/bid/3942/info To enable desktop skinning, Microsoft Windows XP uses '.manifest' files '.exe.manifest'. This file contains XML code that tells Windows XP to use the XP controls. Due to a flaw, Windows XP fails...

Microsoft Windows XP - '.Manifest' Denial of Service

source: https://www.securityfocus.com/bid/3942/info To enable desktop skinning, Microsoft Windows XP uses '.manifest' files '.exe.manifest'. This file contains XML code that tells Windows XP to use the XP controls. Due to a flaw, Windows XP fails to properly verify the XML code within a '.manifes...

CVE-2000-0663

The registry entry for the Windows Shell executable Explorer.exe in Windows NT and Windows 2000 uses a relative path name, which allows local users to execute arbitrary commands by inserting a Trojan Horse named Explorer.exe into the %Systemdrive% directory, aka the "Relative Shell Path"...

CVE-2000-0663: Undefined Security Weakness

The registry entry for the Windows Shell executable Explorer.exe in Windows NT and Windows 2000 uses a relative path name, which allows local users to execute arbitrary commands by inserting a Trojan Horse named Explorer.exe into the %Systemdrive% directory, aka the "Relative Shell Path"...

Win 2000 & IE 'shell://' problem?

I found that IE 5 running Win 2000 accepts "shell://" as a legal protocol, and when any URL ie "shell://localhost" or just "shell://" is loaded IE crashes and brings explorer.exe down with it. I think this would cause a user who didnt know much to think that Win 2000 had crashed of course killing...

Securax Security Advisory: Windows98 contains a serious buffer overflow with long filenameextensions.

===================================================================== Securax-SA-02 Security Advisory belgian.networking.security Dutch ===================================================================== Topic: Ms Windows '95?/'98/SE explorer.exe causes a buffer overflow with long filename...