PT-2007-6238 · Microsoft · Windows Xp

Published 2007-10-01 · Updated 2018-10-30 · CVE-2007-5145

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP (affected versions not specified)

Description The issue is related to multiple buffer overflows in system DLL files in Microsoft Windows XP, which can be exploited by user-assisted remote attackers to cause a denial of service, resulting in an application crash. This can occur when long strings are used in certain Properties fields of a file, such as author, title, subject, and comment. The vulnerability may involve improper handling of extended file attributes by various functions in ntdll.dll and kernel32.dll, including NtQueryInformationFile, NtQueryDirectoryFile, NtSetInformationFile, GetFileAttributesExW, and GetFileAttributesW.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-5145

Affected Products

Windows Xp

References · 4

• 🔥 http://lostmon.blogspot.com/2007/06/buffer-overflow-in-extended-file.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-5145 · Security Note
• http://osvdb.org/41064 · Note
• http://osvdb.org/41065 · Note