BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Defense in depth -- the Microsoft way (part 15): unquoted arguments in 120 (of 462) command lines May 28 2014 09:07PM
Stefan Kanthak (stefan kanthak nexgo de)
Hi @ll,

for MANY years now Microsofts own documentation for CreateProcess*()
<http://msdn.microsoft.com/library/cc144175.aspx> resp.
<http://msdn.microsoft.com/library/cc144101.aspx> says:

| Note: If any element of the command string contains or might contain
...

[ more ]  
 

Privacy Statement
Copyright 2010, SecurityFocus