Windows XP SP2 May Display the Wrong Icon in Zip Archives
|
|
SecurityTracker Alert ID: 1010995 |
|
SecurityTracker URL: http://securitytracker.com/id/1010995
|
|
CVE Reference:
GENERIC-MAP-NOMATCH
(Links to External Site)
|
Updated: Aug 19 2004
|
Original Entry Date: Aug 19 2004
|
Impact:
Modification of system information
|
Exploit Included: Yes
|
Version(s): Windows XP SP2
|
Description:
A vulnerability was reported in Windows XP SP2 in the display of files within zip archives. Windows Explorer and Microsoft Internet Explorer may display a file with the wrong icon.
http-equiv reported that a remote user can create a zip archive containing a malicious file so that when the archived is viewed using Windows XP SP2's native Explorer or Internet Explorer archive viewing functionality, the file will show an arbitrary icon.
A demonstration exploit that shows the Windows Notepad icon on a file named 'notepad.exe' is provided:
http://www.malware.com/malware.sp2.zip
Michael Young of Miles Technologies subsequently reported that the regedit.exe, winhelp.exe, and explorer.exe filenames will also display their corresponding icon.
|
Impact:
A remote user can cause the system to display the wrong file icon to the target local user.
|
Solution:
No solution was available at the time of this entry.
|
Vendor URL: www.microsoft.com/technet/security/ (Links to External Site)
|
Cause:
State error
|
Underlying OS: Windows (XP)
|
|
Message History:
None.
|
Source Message Contents
|
Subject: [Full-Disclosure] Microsoft Windows XP SP2
|
Let's commence by giving credit where credit is due. The
thinking is that the manufacturer of Windows XP has done a
splendid job in patching their little operating system with 300
million dollar's worth of fixes. This is not exactly 'pocket
change'.
But this is:
1. trivial scripting in the local zone
2. notepad icon regardless of file in XP's little zip thing
http://www.malware.com/malware.sp2.zip
many other 'bits and pieces' to be had but overall a splendid
effort on the manufacturer's part [for now]. Not quite sure
where all that money went though.
End Call
--
http://www.malware.com
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
|
|
