SecurityTracker.com
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 


Category:   OS (Microsoft)  >   Windows Explorer Vendors:   Microsoft
Windows XP SP2 May Display the Wrong Icon in Zip Archives
SecurityTracker Alert ID:  1010995
SecurityTracker URL:  http://securitytracker.com/id/1010995
CVE Reference:   GENERIC-MAP-NOMATCH   (Links to External Site)
Updated:  Aug 19 2004
Original Entry Date:  Aug 19 2004
Impact:   Modification of system information
Exploit Included:  Yes  
Version(s): Windows XP SP2
Description:   A vulnerability was reported in Windows XP SP2 in the display of files within zip archives. Windows Explorer and Microsoft Internet Explorer may display a file with the wrong icon.

http-equiv reported that a remote user can create a zip archive containing a malicious file so that when the archived is viewed using Windows XP SP2's native Explorer or Internet Explorer archive viewing functionality, the file will show an arbitrary icon.

A demonstration exploit that shows the Windows Notepad icon on a file named 'notepad.exe' is provided:

http://www.malware.com/malware.sp2.zip

Michael Young of Miles Technologies subsequently reported that the regedit.exe, winhelp.exe, and explorer.exe filenames will also display their corresponding icon.

Impact:   A remote user can cause the system to display the wrong file icon to the target local user.
Solution:   No solution was available at the time of this entry.
Vendor URL:  www.microsoft.com/technet/security/ (Links to External Site)
Cause:   State error
Underlying OS:  Windows (XP)

Message History:   None.


 Source Message Contents

Subject:  [Full-Disclosure] Microsoft Windows XP SP2




Let's commence by giving credit where credit is due. The 
thinking is that the manufacturer of Windows XP has done a 
splendid job in patching their little operating system with 300 
million dollar's worth of fixes. This is not exactly 'pocket 
change'.

But this is:

1. trivial scripting in the local zone
2. notepad icon regardless of file in XP's little zip thing

http://www.malware.com/malware.sp2.zip

many other 'bits and pieces' to be had but overall a splendid 
effort on the manufacturer's part [for now]. Not quite sure 
where all that money went though.


End Call


-- 
http://www.malware.com






_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

 
 


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2019, SecurityGlobal.net LLC