, SecurityFocus 2004-02-16
The first new security vulnerability to emerge from last week's Microsoft source code leak crossed a security mailing list over the weekend, reigniting debate over the seriousness of the leak.
Expand all |
Post comment
In that Slashdot article back in 2000, I reported that vulnerability, writing "The ... decompressor for RLE-compressed .BMP files is in the kernel, and contains a buffer overflow."
I didn't need the source code to find that problem. I found it because I was creating compressed .BMP files and accidentally created one that crashed Win2K every time.
If Microsoft doesn't read Slashdot, that's their problem.
[ reply ]
Link to this comment: http://www.securityfocus.com/comments/articles/8060/25079#25079