Home page logo

bugtraq logo Bugtraq mailing list archives

Re: First vulnerabilities in the SP2 - XP ?...
From: "Oliver Schneider" <Borbarad () gmxpro net>
Date: Tue, 17 Aug 2004 18:29:52 +0200 (MEST)


I also read this yesterday (the German version) and I think it's not a
vulnerability. It's IMO a misconception in the way how SP2 treats alien
executables. And on the other hand it does not actually lower the value of
SP2 concerning security - because the rest of SP2 already boosted security
(this time despite compatibility issues - thanks to MS for finally skipping
compatibility in favor of security). But I agree with the author that MS
should fix this anyway!

Can someone please check if ShellExecute()/ShellExecuteEx() behave different
from the CreateProcess-functions *)? Could that be the reason?
Where is the information stored, that a file was downloaded - ADS? - EAs?
... some arcane new feature?


*) CreateProcess, CreateProcessAsUser, CreateProcessWithLogonW,

May the source be with you, stranger ... ;)

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]