Re: Re: Re: Re: Confirmed: Windows Explorer bad PNG file preview integer overflow handling

To: "rocheml@xxxxxxxxxxx" <rocheml@xxxxxxxxxxx>
Subject: Re: Re: Re: Re: Confirmed: Windows Explorer bad PNG file preview integer overflow handling
From: "Rob Thompson" <my.security.lists@xxxxxxxxx>
Date: Thu, 27 Sep 2007 10:53:36 -0700
Cc: bugtraq@xxxxxxxxxxxxxxxxx
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; bh=grP1xGt+xZ5394zxpj1vegrALdtqosgL9IeHE7tRfdQ=; b=aU72lbc82kdg3t0oWWQ5GU/fcVXYQw2CsspGRg6XyS/DEh9c67LjyVUBnmzE8O3jpam+ikSDVW/b4h5D3E+r/GcS8BkBXiHhN8O3T1QDElbvXyO3Ik+qnHB259YP7/UAT9c53DYgAqc1EGEPNnxN2J4vnM93BNUqFsxrtVByk8U=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=SEDQZtyN0jY04vRJcyIz1j+5zELym+Dp+OzJRghN0WZRVTUxtIoUXL276SjbKX+Cv0qC6/YE35SEFoJpetnTJqkwOHpIpEFdmSoGDNHXAN3cRAO6T4ncpKDR3O0Zuzvo7hIro/MVCAlEmIT5IK4urg3wF/yWbgjjV/JULubvhZg=
In-reply-to: <20070927163818.24980.qmail@xxxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <20070927163818.24980.qmail@xxxxxxxxxxxxxxxxx>

I have tested this on a Windoze XP SP2 (fully patched).  Scanned with
Norton AV Corporate Edition v 10 and ClamAV 0.91.2 and both scans came
back just fine, no hanging.

Upon opening the file, it caused 50% CPU utilization at a constant
rate.  That could not be stopped until the computer was reboot.
Simply closing the program wasn't enough to stop the CPU from
stopping...

BTW - I'm running this on a P4 with HT.  Not a dual core...

-- 
Rob

References:
- Re: Re: Re: Re: Confirmed: Windows Explorer bad PNG file preview integer overflow handling
  - From: rocheml

Prev by Date: Re: Re: Re: Re: Confirmed: Windows Explorer bad PNG file preview integer overflow handling
Next by Date: Re: defining 0day
Previous by thread: Re: Re: Re: Re: Confirmed: Windows Explorer bad PNG file preview integer overflow handling
Next by thread: ERNW Tool Release: CVSS Calculator
Index(es):
- Date
- Thread