Bugtraq mailing list archives

Windows MS-DOS Device Name DoS vulnerabilities


From: richardca () hushmail com
Date: Fri, 6 Jul 2001 17:43:41 -0500 (EDT)

Uhmm,

I was thinking, some of the advisories published only talked about requesting 
a device name. the ms site says two or more. the issue you name is only 
win9x, yet some guy posted about a problem in NT today using ONE device 
name.

Win ME was also affeccted in some advisories. One would expect it to be 
fixed in that edition of windows if this is indeed the same problem.

Some advisories say the box would just lock up not give any blue screen.

Am I missing something here?


AFFECTED SYSTEMS

Microsoft Windows 95
Microsoft Windows 98
Microsoft Windows 98 SE

CONCLUSION : patch your OS, and stop whining about so
called 'bugs' in applications, you will never be able
to completely patch the problem that way.

PATCH

Go to the Microsoft Knowledge Base @
http://search.support.microsoft.com/kb/c.asp

And find the article with article ID Q256015
(titled Fatal Exception 0E with Multiple MS-DOS Device
Names in Path)

Free, encrypted, secure Web-based email at www.hushmail.com

Current thread: