The Active Network
ActiveMac Anonymous | Create a User | Reviews | News | Forums | Advertise  
 

  *  

  Unchecked Buffer in File Decompression Functions Could Lead to Code Execution (Q329048)
Time: 01:58 EST/06:58 GMT | News Source: Microsoft | Posted By: Byron Hinson

All three vulnerabilities discussed in this bulletin involve the inclusion of the Sun RPC library in Microsoft’s Services for UNIX (SFU) 3.0 on the Interix SDK. Developers who created applications or utilities using the Sun RPC library from the Interix SDK need to evaluate three vulnerabilities.

Zipped files (files having a .zip extension) provide a means to store information in a way that uses less space on a hard disk. This is accomplished by compressing the files that are put into in the zipped file. On Windows 98 with Plus! Pack, Windows Me and Windows XP, the Compressed Folders feature allows zipped files to be treated as folders. The Compressed Folders feature can be used to create, add files to, and extract files from zipped files.

Two vulnerabilities exist in the Compressed Folders function:

  • An unchecked buffer exists in the programs that handles the decompressing of files from a zipped file. A security vulnerability results because attempts to open a file with a specially malformed filename contained in a zipped file could possibly result in Windows Explorer failing, or in code of the attacker’s choice being run.
  • The decompression function could place a file in a directory that was not the same as, or a child of, the target directory specified by the user as where the decompressed zip files should be placed. This could allow an attacker to put a file in a known location on the users system, such as placing a program in a startup directory

Patch availability

Download locations for this patch

Write Comment
Return to News

  Displaying 601 through 607 of 607
Prev | First
  The time now is 3:17:44 PM ET.
Any comment problems? E-mail us
#601 By 4240821 (82.115.4.230) at 8/12/2025 6:07:02 PM
https://www.xfree.com/alunpumge826
https://www.xfree.com/starbehigto337
https://www.xfree.com/evungegeab888
https://www.xfree.com/citerribo414
https://www.xfree.com/gurgverwordlo315
https://www.xfree.com/jaawinradi570
https://www.xfree.com/warecvechic760
https://www.xfree.com/casrengwacy256
https://www.xfree.com/gechaneava986
https://www.xfree.com/jortaperburb869

#602 By 4240821 (82.115.4.230) at 8/13/2025 9:32:22 AM
https://www.xfree.com/alasesstic626
https://www.xfree.com/intinedu387
https://www.xfree.com/pazcmanflota973
https://www.xfree.com/propananmic271
https://www.xfree.com/carsappweda887
https://www.xfree.com/centconhoote672
https://www.xfree.com/aclelankworl360
https://www.xfree.com/iwprosorus770
https://www.xfree.com/spynrazopo262
https://www.xfree.com/crosardragal135

#603 By 4240821 (82.115.4.230) at 8/13/2025 6:39:26 PM
https://www.xfree.com/adunanat596
https://www.xfree.com/racapawa70
https://www.xfree.com/ickaposimp624
https://www.xfree.com/seoparudi594
https://www.xfree.com/riacarneczte433
https://www.xfree.com/makhekabac936
https://www.xfree.com/provnalimo711
https://www.xfree.com/nipotuthin146
https://www.xfree.com/quebidide444
https://www.xfree.com/bueboundextti939

#604 By 4240821 (82.115.4.230) at 8/14/2025 10:08:04 PM
https://www.xfree.com/minspittmodgi968
https://www.xfree.com/melpathope996
https://www.xfree.com/aledtanne435
https://www.xfree.com/arinitas929
https://www.xfree.com/wasyscaver628
https://www.xfree.com/camptegolfrin706
https://www.xfree.com/verregomi710
https://www.xfree.com/concocede522
https://www.xfree.com/liatrophibpe107
https://www.xfree.com/feedswachledi49

#605 By 4240821 (82.115.4.230) at 8/15/2025 1:10:30 AM
https://www.xfree.com/synfozelwhee806
https://www.xfree.com/lenrutaree849
https://www.xfree.com/plataneatsur315
https://www.xfree.com/sislirisruck282
https://www.xfree.com/plemmustiwee78
https://www.xfree.com/tezgogepost421
https://www.xfree.com/encrisohrea124
https://www.xfree.com/terleiprotti552
https://www.xfree.com/neytranranre769
https://www.xfree.com/contcomtomus381

#606 By 4240821 (82.115.4.230) at 8/16/2025 3:06:12 PM
https://www.xfree.com/sporescudi498
https://www.xfree.com/acinedar788
https://www.xfree.com/gebumquensum453
https://www.xfree.com/opamlofso946
https://www.xfree.com/landphytinma349
https://www.xfree.com/newmafacor491
https://www.xfree.com/leotrenexun177
https://www.xfree.com/jourwinthmarness529
https://www.xfree.com/nextmournpocfio50
https://www.xfree.com/vergardriten549

#607 By 4240821 (82.115.4.230) at 8/17/2025 10:01:43 AM
https://www.xfree.com/diaconsnevar964
https://www.xfree.com/fecmevano74
https://www.xfree.com/bigtiahucksib220
https://www.xfree.com/buiherriumels409
https://www.xfree.com/puloverblehn631
https://www.xfree.com/geschvinrguagi549
https://www.xfree.com/enlamanjo671
https://www.xfree.com/warwelldulkers911
https://www.xfree.com/hyatriplandfect985
https://www.xfree.com/erouthpolo932

Write Comment
Return to News
  Displaying 601 through 607 of 607
Prev | First
  The time now is 3:17:44 PM ET.
Any comment problems? E-mail us
User name and password:

 

  *  
  *   *