[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Windows XP explorer.exe heap overflow.
- To: "Larry Seltzer" <larry@xxxxxxxxxxxxxxxx>, "'Eli K.'" <elik@xxxxxxxxxxxxxxxxxx>, <sunglasses@xxxxxxxxxxxxx>, <bugtraq@xxxxxxxxxxxxxxxxx>
- Subject: Re: Windows XP explorer.exe heap overflow.
- From: Dragos Ruiu <dr@xxxxxxx>
- Date: Thu, 26 Feb 2004 10:41:11 -0800
> > To exploit this flaw (in explorer), simply place a malformed (invalid
> > "size" field) .emf file in any directory, open explorer to that path,
> > and view as Thumbnails. Bang. In it's simplest form it's a DOS - it
> > affects all explorer windows, including File Open dialogs for many
> > programs.
The february 04 issue of MaximumPC lists the following registry key
to tweak to help speed up your system. Seems to me this might have
other benefits besides speed. :-)
Remove Image Preview by deleting this key:
HKEY_Classes_Root\SystemFileAssociations\Image\ShellEx\ContextMenuHandlers\ShellImagePreview
cheers,
--dr
--
Top security experts. Cutting edge tools, techniques and information.
Vancouver, Canada April 21-23 2004 http://cansecwest.com
pgpkey http://dragos.com/ kyxpgp