Microsoft Windows XP and Windows Server 2003 Compressed Folders buffer overflow
| win-compressed-folders-bo (17624) |  High Risk |
Description:
Microsoft Windows is vulnerable to a buffer overflow, caused by improper handling of compressed files by the Compressed (zipped) Folders feature. By creating a malicious compressed file, a remote attacker could overflow the buffer and execute arbitrary code on the system, once the file is processed. An attacker could exploit this vulnerability by hosting the malicious file on a Web site or by sending it to a victim as an HTML email.
Platforms Affected:
- Microsoft, Windows 2003 Server x64
- Microsoft, Windows 2003 Server
- Microsoft, Windows XP 2003 64-bit
- Microsoft, Windows XP SP1 64-bit
- Microsoft, Windows XP
- Microsoft, Windows XP SP1
Remedy:
Apply the appropriate patch for your system, as listed in Microsoft Security Bulletin MS04-034. See References.
Consequences:
Gain Access
References:
- BugTraq Mailing List, Tue Oct 12 2004 - 23:49:03 CDT, EEYE: Windows Shell ZIP File Decompression DUNZIP32.DLL Buffer Overflow Vulnerability at http://archives.neohapsis.com/archives/bugtraq/2004-10/0105.html.
- CIAC Information Bulletin P-010, Microsoft Compressed (Zipped) Folders Vulnerability at http://www.ciac.org/ciac/bulletins/p-010.shtml.
- Microsoft Security Bulletin MS04-034, Vulnerability in Compressed (zipped) Folders Could Allow Remote Code Execution (873376) at http://www.microsoft.com/technet/security/bulletin/ms04-034.mspx.
- BID-11382: Microsoft Windows Compressed (zipped) Folder Buffer Overflow Vulnerability
- CVE-2004-0575: Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to execute arbitrary code via compressed (zipped) folders that involve an unchecked buffer and improper length validation.
- SECTRACK ID: 1011637: Microsoft Windows Buffer Overflow in Processing Compressed Folders Lets Remote Users Execute Arbitrary Code
- US-CERT VU#649374: Microsoft Windows processing of zip files contains a buffer overflow
Reported:
Oct 12, 2004
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net