Home    |    View Topics    |    Search    |    Contact Us    |   



Category:   OS (Microsoft)  >   Windows Explorer Vendors:   Microsoft
Windows XP SP2 May Display the Wrong Icon in Zip Archives
SecurityTracker Alert ID:  1010995
SecurityTracker URL:
CVE Reference:   GENERIC-MAP-NOMATCH   (Links to External Site)
Updated:  Aug 19 2004
Original Entry Date:  Aug 19 2004
Impact:   Modification of system information
Exploit Included:  Yes  
Version(s): Windows XP SP2
Description:   A vulnerability was reported in Windows XP SP2 in the display of files within zip archives. Windows Explorer and Microsoft Internet Explorer may display a file with the wrong icon.

http-equiv reported that a remote user can create a zip archive containing a malicious file so that when the archived is viewed using Windows XP SP2's native Explorer or Internet Explorer archive viewing functionality, the file will show an arbitrary icon.

A demonstration exploit that shows the Windows Notepad icon on a file named 'notepad.exe' is provided:

Michael Young of Miles Technologies subsequently reported that the regedit.exe, winhelp.exe, and explorer.exe filenames will also display their corresponding icon.

Impact:   A remote user can cause the system to display the wrong file icon to the target local user.
Solution:   No solution was available at the time of this entry.
Vendor URL: (Links to External Site)
Cause:   State error
Underlying OS:  Windows (XP)

Message History:   None.

 Source Message Contents

Subject:  [Full-Disclosure] Microsoft Windows XP SP2

Let's commence by giving credit where credit is due. The 
thinking is that the manufacturer of Windows XP has done a 
splendid job in patching their little operating system with 300 
million dollar's worth of fixes. This is not exactly 'pocket 

But this is:

1. trivial scripting in the local zone
2. notepad icon regardless of file in XP's little zip thing

many other 'bits and pieces' to be had but overall a splendid 
effort on the manufacturer's part [for now]. Not quite sure 
where all that money went though.

End Call


Full-Disclosure - We believe in it.


Go to the Top of This SecurityTracker Archive Page

Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2021, LLC