[Full-disclosure] Microsoft Windows default ZIP handler bug

3APA3A 3APA3A at SECURITY.NNOV.RU
Mon Oct 15 20:04:47 BST 2007


Dear Kristian Erik Hermansen,

Can  not reproduce it on patched Windows XP. May be it's DynaZIP library
buffer overflows fixed with MS04-34.

--Monday, October 15, 2007, 12:19:31 PM, you wrote to full-disclosure at lists.grok.org.uk:

KEH> I tested this on three Windows XP machines and was able to make them
KEH> all crash.  There is an issue with the way Microsoft's default

-- 
~/ZARAZA http://securityvulns.com/





Full-Disclosure is hosted and sponsored by Secunia.