Bugtraq mailing list archives

Re: Execution Rights Not Checked Correctly For 16-bit Applications


From: Torbjörn Hovmark <torbjorn.hovmark () abtrusion com>
Date: Thu, 19 Sep 2002 09:04:19 +0200

Steve,

I wasn't able to duplicate this on a Windows 2000 SP3 box. I think
it may have been fixed there, seeing as this document was written
before SP3 was released.

No, it isn't fixed in SP3. Microsoft has indicated that they will fix it in
SP4.

Besides, when trying to duplicate this, make sure that you don't
accidentally deny or remove read permission for the file as well. If you do,
NTVDM will not be able to read the file into memory. (I don't know if this
is the reason you can't duplicate it, but it seems to be a common mistake.)


Best regards / Torbjörn Hovmark

______________________________________
Abtrusion Security AB
http://www.abtrusion.com




Current thread: