Miscrosoft Registry Editor 5.1/XP/2K long string key vulnerability

["mike king" <ngiles () hushmail com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I did not see anyone post a way to delete the registry key added so
here is the tool I found that could accomplish this.

"Regalyzer" from http://www.safer-
networking.org/en/download/index.html

query the key added to the registry.

E:\>reg query HKEY_LOCAL_MACHINE\SOFTWARE\empty

! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\empty
helloworldhelloworldhelloworldhelloworldhelloworldhelloworldhellowor

ldhelloworldhelloworldhelloworldhelloworldhelloworldhelloworldhellow
orldhelloworldhelloworldhelloworldhelloworldhelloworldhelloworldhell
oworldhelloworldhelloworldhelloworldhelloworldhelloworl REG_SZ

E:\ >

After removing the key from the registry with Reglyzer

E:\ reg query HKEY_LOCAL_MACHINE\SOFTWARE\empty
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\empty

E:\ >

Best of luck mike king

time® is a trademark of Universe©
Public use permited by fair use agreement ( copyright [NULL] )



-----BEGIN PGP SIGNATURE-----
Note: This signature can be verified at https://www.hushtools.com/verify
Version: Hush 2.4

wkYEARECAAYFAkMNXd0ACgkQUjm7xSZSd8Em/ACfT5moimV8XKz1eDBZOQoWRoBxWuQA
oI2gZZ1WYNZ8wfUs6LIy//orr72E
=T25c
-----END PGP SIGNATURE-----