SecurityFocus

Windows XP explorer.exe heap overflow. Feb 20 2004 06:45PM
sunglasses bay-watch com (2 replies)

Re: Windows XP explorer.exe heap overflow. Feb 24 2004 05:08PM
Tim (tim-security sentinelchicken org)

Re: Windows XP explorer.exe heap overflow. Feb 24 2004 10:36AM
Eli K. (elik beyondsecurity com) (1 replies)

RE: Windows XP explorer.exe heap overflow. Feb 25 2004 03:48PM
Larry Seltzer (larry larryseltzer com) (2 replies)

Re: Windows XP explorer.exe heap overflow. Feb 26 2004 06:41PM
Dragos Ruiu (dr kyx net)

> > To exploit this flaw (in explorer), simply place a malformed (invalid
> > "size" field) .emf file in any directory, open explorer to that path,
> > and view as Thumbnails. Bang. In it's simplest form it's a DOS - it
> > affects all explorer windows, including File Open dialogs for many
> > programs.

The february 04 issue of MaximumPC lists the following registry key
to tweak to help speed up your system. Seems to me this might have
other benefits besides speed. :-)

Remove Image Preview by deleting this key:

HKEY_Classes_Root\SystemFileAssociations\Image\ShellEx\ContextMenuHandle
rs\ShellImagePreview

cheers,
--dr

--
Top security experts. Cutting edge tools, techniques and information.
Vancouver, Canada April 21-23 2004 http://cansecwest.com
pgpkey http://dragos.com/ kyxpgp

[ reply ]

Re: Windows XP explorer.exe heap overflow. Feb 25 2004 04:27PM
Eli Kara (elik beyondsecurity com)