Windows Shell file type spoofing
Published:		14.07.2004
Source:		MICROSOFT
SecurityVulns ID:		3848
Type:		client
Level:		5/10
Description:		By using class id in content-disposition it's possible ti spoof file type. Content-Disposition: attachment; filename=malware.{3050f4d8-98B5- 11CF-BB82-00AA00BDCE0B}fun_ball_gites_pie_throw%2Empeg"

Affected:		MICROSOFT : Windows NT 4.0 Workstation
		MICROSOFT : Windows NT 4.0 Server
		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server

Original document

MICROSOFT, Microsoft Security Bulletin MS04-024 (14.07.2004)

Files:		Microsoft Security Bulletin MS04-024 Vulnerability in Windows Shell Could Allow Remote Code Execution (839645)
Discuss:		Read or add your comments to this news (0 comments)