• info
• discussion
• exploit
• solution
• references

Microsoft Windows User Shell Buffer Overflow Vulnerability

Solution:
Microsoft has released fixes:


Microsoft Windows 2000 Server SP2

• Microsoft Q313829_W2K_SP3_X86_EN
  http://download.microsoft.com/download/win2000platform/Patch/Q313829/N T5/EN-US/Q313829_W2K_SP3_X86_EN.exe

Microsoft Windows NT Enterprise Server 4.0

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT 4.0 without Active Desktop
  http://download.microsoft.com/download/winntsp/Patch/Q313829/NT4/EN-US /Q313829i.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows 2000 Advanced Server SP1

• Microsoft Q313829_W2K_SP3_X86_EN
  http://download.microsoft.com/download/win2000platform/Patch/Q313829/N T5/EN-US/Q313829_W2K_SP3_X86_EN.exe

Microsoft Windows 98 SP1

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe

Microsoft Windows 2000 Datacenter Server

• Microsoft Q313829_W2K_SP3_X86_EN
  http://download.microsoft.com/download/win2000platform/Patch/Q313829/N T5/EN-US/Q313829_W2K_SP3_X86_EN.exe

Microsoft Windows 2000 Advanced Server SP2

• Microsoft Q313829_W2K_SP3_X86_EN
  http://download.microsoft.com/download/win2000platform/Patch/Q313829/N T5/EN-US/Q313829_W2K_SP3_X86_EN.exe

Microsoft Windows NT Terminal Server 4.0

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows NT Workstation 4.0 SP6a

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT 4.0 without Active Desktop
  http://download.microsoft.com/download/winntsp/Patch/Q313829/NT4/EN-US /Q313829i.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows NT Enterprise Server 4.0 SP3

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT 4.0 without Active Desktop
  http://download.microsoft.com/download/winntsp/Patch/Q313829/NT4/EN-US /Q313829i.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows NT Workstation 4.0 SP5

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT 4.0 without Active Desktop
  http://download.microsoft.com/download/winntsp/Patch/Q313829/NT4/EN-US /Q313829i.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows NT Enterprise Server 4.0 SP4

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT 4.0 without Active Desktop
  http://download.microsoft.com/download/winntsp/Patch/Q313829/NT4/EN-US /Q313829i.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows NT Workstation 4.0 SP2

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT 4.0 without Active Desktop
  http://download.microsoft.com/download/winntsp/Patch/Q313829/NT4/EN-US /Q313829i.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows NT Enterprise Server 4.0 SP5

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT 4.0 without Active Desktop
  http://download.microsoft.com/download/winntsp/Patch/Q313829/NT4/EN-US /Q313829i.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows NT Workstation 4.0 SP4

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT 4.0 without Active Desktop
  http://download.microsoft.com/download/winntsp/Patch/Q313829/NT4/EN-US /Q313829i.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows NT Terminal Server 4.0 SP2

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows 2000 Datacenter Server SP1

• Microsoft Q313829_W2K_SP3_X86_EN
  http://download.microsoft.com/download/win2000platform/Patch/Q313829/N T5/EN-US/Q313829_W2K_SP3_X86_EN.exe

Microsoft Windows 98SE

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe

Microsoft Windows NT Terminal Server 4.0 SP4

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows NT Server 4.0 SP6a

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT 4.0 without Active Desktop
  http://download.microsoft.com/download/winntsp/Patch/Q313829/NT4/EN-US /Q313829i.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows 2000 Professional SP2

• Microsoft Q313829_W2K_SP3_X86_EN
  http://download.microsoft.com/download/win2000platform/Patch/Q313829/N T5/EN-US/Q313829_W2K_SP3_X86_EN.exe

Microsoft Windows NT Enterprise Server 4.0 SP1

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT 4.0 without Active Desktop
  http://download.microsoft.com/download/winntsp/Patch/Q313829/NT4/EN-US /Q313829i.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows 2000 Professional

• Microsoft Q313829_W2K_SP3_X86_EN
  http://download.microsoft.com/download/win2000platform/Patch/Q313829/N T5/EN-US/Q313829_W2K_SP3_X86_EN.exe

Microsoft Windows 98

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe

Microsoft Windows NT Terminal Server 4.0 SP1

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows NT Enterprise Server 4.0 SP2

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT 4.0 without Active Desktop
  http://download.microsoft.com/download/winntsp/Patch/Q313829/NT4/EN-US /Q313829i.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows NT Server 4.0 SP3

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT 4.0 without Active Desktop
  http://download.microsoft.com/download/winntsp/Patch/Q313829/NT4/EN-US /Q313829i.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows NT Terminal Server 4.0 SP3

• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows NT Workstation 4.0 SP6

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT 4.0 without Active Desktop
  http://download.microsoft.com/download/winntsp/Patch/Q313829/NT4/EN-US /Q313829i.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows NT Server 4.0 SP1

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT 4.0 without Active Desktop
  http://download.microsoft.com/download/winntsp/Patch/Q313829/NT4/EN-US /Q313829i.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows NT Workstation 4.0

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT 4.0 without Active Desktop
  http://download.microsoft.com/download/winntsp/Patch/Q313829/NT4/EN-US /Q313829i.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows 2000 Professional SP1

• Microsoft Q313829_W2K_SP3_X86_EN
  http://download.microsoft.com/download/win2000platform/Patch/Q313829/N T5/EN-US/Q313829_W2K_SP3_X86_EN.exe

Microsoft Windows NT Enterprise Server 4.0 SP6

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT 4.0 without Active Desktop
  http://download.microsoft.com/download/winntsp/Patch/Q313829/NT4/EN-US /Q313829i.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows NT Server 4.0

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT 4.0 without Active Desktop
  http://download.microsoft.com/download/winntsp/Patch/Q313829/NT4/EN-US /Q313829i.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows NT Terminal Server 4.0 SP6

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows NT Workstation 4.0 SP3

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT 4.0 without Active Desktop
  http://download.microsoft.com/download/winntsp/Patch/Q313829/NT4/EN-US /Q313829i.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows NT Enterprise Server 4.0 SP6a

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT 4.0 without Active Desktop
  http://download.microsoft.com/download/winntsp/Patch/Q313829/NT4/EN-US /Q313829i.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows 2000 Datacenter Server SP2

• Microsoft Q313829_W2K_SP3_X86_EN
  http://download.microsoft.com/download/win2000platform/Patch/Q313829/N T5/EN-US/Q313829_W2K_SP3_X86_EN.exe

Microsoft Windows NT Server 4.0 SP6

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT 4.0 without Active Desktop
  http://download.microsoft.com/download/winntsp/Patch/Q313829/NT4/EN-US /Q313829i.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows 2000 Server SP1

• Microsoft Q313829_W2K_SP3_X86_EN
  http://download.microsoft.com/download/win2000platform/Patch/Q313829/N T5/EN-US/Q313829_W2K_SP3_X86_EN.exe

Microsoft Windows NT Server 4.0 SP5

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT 4.0 without Active Desktop
  http://download.microsoft.com/download/winntsp/Patch/Q313829/NT4/EN-US /Q313829i.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows NT Server 4.0 SP2

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT 4.0 without Active Desktop
  http://download.microsoft.com/download/winntsp/Patch/Q313829/NT4/EN-US /Q313829i.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows NT Terminal Server 4.0 SP5

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows NT Workstation 4.0 SP1

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT 4.0 without Active Desktop
  http://download.microsoft.com/download/winntsp/Patch/Q313829/NT4/EN-US /Q313829i.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe

Microsoft Windows 2000 Advanced Server

• Microsoft Q313829_W2K_SP3_X86_EN
  http://download.microsoft.com/download/win2000platform/Patch/Q313829/N T5/EN-US/Q313829_W2K_SP3_X86_EN.exe

Microsoft Windows 2000 Server

• Microsoft Q313829_W2K_SP3_X86_EN
  http://download.microsoft.com/download/win2000platform/Patch/Q313829/N T5/EN-US/Q313829_W2K_SP3_X86_EN.exe

Microsoft Windows NT Server 4.0 SP4

• Microsoft Q313829
  For NT4/Win9X Systems with Active Desktop.
  http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/W9XNT4/ EN-US/q313829.exe


• Microsoft Q313829i
  Windows NT 4.0 without Active Desktop
  http://download.microsoft.com/download/winntsp/Patch/Q313829/NT4/EN-US /Q313829i.exe


• Microsoft Q313829i
  Windows NT4 Terminal Services
  http://download.microsoft.com/download/winntterminal/Patch/Q313829/NT4 /EN-US/Q313829i.exe