Microsoft Windows Compressed Folders Buffer Overflow Vulnerability - Secunia Advisories - Vulnerability Intelligence

Microsoft Windows Compressed Folders Buffer Overflow Vulnerability
Secunia Advisory:	SA12805	Advisory Toolbox: Issue ticket Save in to-do list Mark as handled Exploit information Download as PDF Review actions Add comment
Release Date:	2004-10-12
Last Update:	2004-10-13
Popularity:	15,658 views

Critical:	Highly critical
Impact:	System access
Where:	From remote
Solution Status:	Vendor Patch

OS:	Microsoft Windows Server 2003 Enterprise Edition Microsoft Windows Server 2003 Standard Edition Microsoft Windows Server 2003 Web Edition Microsoft Windows XP Home Edition Microsoft Windows XP Professional

Subscribe:	Instant alerts on relevant vulnerabilities

CVE reference:	CVE-2004-0575

Description: eEye Digital Security has reported a vulnerability in Microsoft Windows, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to a boundary error in "dunzip32.dll" within the Compressed Folders feature when handling compressed (zipped) folders. This can be exploited to cause a stack-based buffer overflow when opening a ZIP folder containing an overly long file name. Successful exploitation allows execution of arbitrary code. NOTE: Microsoft Windows XP SP2 is not vulnerable. Solution: Apply patches. Microsoft Windows XP (prior to SP2): http://www.microsoft.com/downloads/de...=6B70BA00-56D1-4314-8F53-F8355A6861D3 Microsoft Windows XP 64-Bit Edition (requires SP1): http://www.microsoft.com/downloads/de...=3F6896F3-F055-438D-93CE-CD15F37264CB Microsoft Windows XP 64-Bit Edition Version 2003: http://www.microsoft.com/downloads/de...=4B63EF24-D0E4-4005-8E23-2F5EC24BE63F Microsoft Windows Server 2003: http://www.microsoft.com/downloads/de...=0903569E-7F3D-4846-A1DC-78734E77D3A9 Microsoft Windows Server 2003 64-Bit Edition: http://www.microsoft.com/downloads/de...=4B63EF24-D0E4-4005-8E23-2F5EC24BE63F Provided and/or discovered by: Yuji Ukai, eEye Digital Security. Changelog: 2004-10-13: Added more information and link to eEye Digital Security advisory. Original Advisory: MS04-034 (KB873376): http://www.microsoft.com/technet/security/bulletin/ms04-034.mspx eEye Digital Security: http://www.eeye.com/html/research/advisories/AD20041012A.html

Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released. Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

Latest Advisories

20th Nov, 2008

New advisories:	24
New vulnerabilities:	48
Updated advisories:	34

Highly // 248 views

Alex Multiple Products File Upload Vulnerability

Moderately // 238 views

ClipShare "chid" SQL Injection Vulnerability

Moderately // 244 views

MauryCMS "c" SQL Injection Vulnerability

Less // 277 views

MyTopix "send" SQL Injection Vulnerability

Less // 303 views

MailScanner "trend-autoupdate" Insecure Temporary Files

Not // 273 views

P3nfs Insecure Temporary Files

Less // 303 views

pam_mount "passwdehd" Insecure Temporary Files

Less // 292 views

refbase "headerMsg" Cross-Site Scripting Vulnerability

Highly // 369 views

imlib2 XPM Processing Buffer Overflow Vulnerability

Less // 300 views

SystemImager "si_mkbootserver" Insecure Temporary Files

Solutions | More...

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.