Hidden file vulnerability on XP (not tested elsewhere)
I have mistakenly come across a potential vulnerability, it allows files to be hidden in the c:\windows\fonts folder.
I came across this while installing some fonts I had downloaded. I was using winrar, and winrar works a bit differently than winzip and the standard windows xp file expander. If the files are contained in folders within the archive, and you select a single file not in the root of the directory, it will exctract to its desired desination within this folder (ex: a file is in zip:/folder/file.exe and i want to extract just file.exe to c:\ it would actually go to c:\folder\file.exe). So I install the font (which was in a folder, within the archive), not realizing it has been extracted to c:\windows\fonts\fontname\font.ttf. There is some inconsistency with the fonts folders that allows only fonts to be viewed there (using windows explorer), thus this folder was hidden.
To confirm I made an archive with winrar containg only notepad.exe. I extracted this file to c:\windows\fonts\test\notepad.exe. Then I went to windows explorer and navigated to the fonts folder, and there was no test folder. Then I went to run, and typed in c:\windows\fonts\test\notepad.exe and sure enough, notepad opened.
In conclusion files can be stored here and not be visible using a standard file browser. These directories however can be viewed in dos using the 'dir' function.
I'm not sure if this has been discovered already.
