Dated: 30 Aug 2004
1. What is it ?
The windows shorcuts a.k.a .lnk files, cause exceptions if they have
an invalid format.Upon opening the folder containing the invalid
shorcut or the shortcut itself,the Explorer.exe process generated an
exception.
2. Systems Affected
We found the problem to occur in the following systems:
1.Windows 2000 Professional SP0
2.Windows 2000 Professional SP4
we believe the problem may be present in other systems also.
3. The problem
We are unable to decipher the problem at this time, Upon fuzzing the
windows shortcut file format, the problem seems to be random in
nature.Also windows tracks the shortcuts if the folder containing the
shortcut is open and tries to correct any invalid shortcut.The problem
occurs while correcting the shortcut and also when the shortcut is opened.
4. Exploitable ?
We can't say anything at this time.
5. Refrences
[a] www.wotsit.com, get the LNK file format here.
[b] Link file fuzzer(LnkFuzzer)
wwww.angelfire.com/theforce/crux/LnkFuzzer.zip
Pranay Kanwar
Aditya Sood
-=[Crux Labs]=-
Crux245@yahoo.com