Description
Buffer overflow in Windows Explorer (explorer.exe) on Windows XP and 2003 allows user-assisted attackers to cause a denial of service (repeated crash) and possibly execute arbitrary code via a .url file with an InternetShortcut tag containing a long URL and a large number of "file:" specifiers.
References
- 1186 third-party-advisory
- 20060706 Re: Windows Explorer URL File format overflow mailing-list
- win-explorer-url-dos(27567) vdb-entry
- 20060705 Windows Explorer URL File format overflow mailing-list
- 18838 vdb-entry