• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Microsoft Windows 98/ME/XP File Decompression Vulnerabilities

Solution:
Microsoft has incorporated the fix for the malformed filename buffer overflow into Windows XP SP1. Windows ME may only be updated using Windows Update.

Patches are available:


Microsoft Windows XP Home

• Microsoft Q329048
  http://www.microsoft.com/Downloads/Release.asp?ReleaseID=43419

Microsoft Windows XP Home SP1

• Microsoft Q329048
  http://www.microsoft.com/Downloads/Release.asp?ReleaseID=43419

Microsoft Windows 98 With Plus! Pack

• Microsoft Q329048
  http://www.microsoft.com/windows98/downloads/contents/WUCritical/q3290 48/default.asp