Description
Buffer overflow in Microsoft Msinfo32.exe might allow local users to execute arbitrary code via a long filename in the msinfo_file command line parameter. NOTE: this issue might not cross security boundaries, so it may be REJECTED in the future.
References
- msinfo-msinfofile-bo(17153) vdb-entry
- 20040831 MSInfo Buffer Overflow mailing-list
- 20040830 MSInfo Buffer Overflow mailing-list
- 20040830 MSInfo Buffer Overflow mailing-list