Bugtraq mailing list archives

Another Windows98 Bug...

From: smc () visuallink com (Scott)
Date: Mon, 9 Feb 1998 17:49:45 -0800


This is a multi-part message in MIME format.

------=_NextPart_000_022E_01BD3583.1B9CF120
Content-Type: text/plain;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

I'm not sure about the details of this problem, but when testing another =
buffer overflow, I created a long filename called "testfile.txt          =
                                                                         =
                                                                         =
                                                                   "
(note the chr(160)'s at the end) It is 235 characters in length.  After =
creating it on my desktop, I right clicked on it; explorer crashed =
saying it caused an illegal operation.  the only way I found to close =
this was by using command.com  I sent this to a friend and he got the =
same error.

        -Scott Campbell (smc () visuallink com)

------=_NextPart_000_022E_01BD3583.1B9CF120
Content-Type: text/html;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD W3 HTML//EN">

<HTML>
<HEAD>

<META content=3Dtext/html;charset=3Diso-8859-1 =
http-equiv=3DContent-Type>
<META content=3D'"MSHTML 4.72.3612.1700"' name=3DGENERATOR>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT color=3D#000000 size=3D2>I'm not sure about the details of =
this problem,=20
but when testing another buffer overflow, I created a long filename =
called=20
"testfile.txt         &=
nbsp;           &n=
bsp;           &nb=
sp;           &nbs=
p;           &nbsp=
;            =
            &=
nbsp;           &n=
bsp;           &nb=
sp;           &nbs=
p;           &nbsp=
;            =
            &=
nbsp;           &n=
bsp;           &nb=
sp;           &nbs=
p;           &nbsp=
;            =
      =20
"</FONT></DIV>
<DIV><FONT color=3D#000000 size=3D2>(note the chr(160)'s at the end) It =
is 235=20
characters in length.  After creating it on my desktop, I right =
clicked on=20
it; explorer crashed saying it caused an illegal operation.  the =
only way I=20
found to close this was by using command.com  I sent this to a =
friend and=20
he got the same error.</FONT></DIV>
<DIV><FONT color=3D#000000 size=3D2></FONT> </DIV>
<DIV><FONT color=3D#000000 =
size=3D2>       =20
-Scott Campbell (<A=20
href=3D"mailto:smc () visuallink com">smc () visuallink com</A>)</FONT></DIV></=
BODY></HTML>

------=_NextPart_000_022E_01BD3583.1B9CF120--

Current thread:

Re: SSH 1.x and 2.x Daemon Tibor Toronyi (Feb 08)
- Another Windows98 Bug... Scott (Feb 09)
  - Re: Another Windows98 Bug... Jensen Allan AJE (Feb 12)
    - mc & Segmentation fault shaman (Feb 12)
    - Re: Another Windows98 Bug... Nick Lamb (Feb 12)
- Re: SSH 1.x and 2.x Daemon Brandon S. Allbery (Feb 09)
- Re: SSH 1.x and 2.x Daemon Greg A. Woods (Feb 09)
  - Re: SSH 1.x and 2.x Daemon Casper Dik (Feb 11)
    - Re: SSH 1.x and 2.x Daemon Kevin Vajk (Feb 12)
  - Rainbow Six Buffer Overflow..... Brian Gemberling (Feb 11)
- Access 97 Password Unmasker Nate Lawson (Feb 09)
- Lynx /tmp problem Juan Diego Bolanos (Feb 09)

(Thread continues...)