| Vector: | Remote |
| Severity: | Medium |
| Patch: | Patched |
| Impact: |
Denial of Service (DoS) Remote Code Execution (RCE) |
| Software: |
Microsoft Windows 2000 Advanced Server Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Professional Microsoft Windows 2000 Server |
A remote code execution vulnerability was found in Windows 2000 ShellExecute API.
Buffer overflow vulnerability exists in the API "ShellExecute" in "shell32.dll", which is used to execute programs associated with a given file type. An attacker can exploit this vulnerability by supplying a pointer referencing an overly long string (about 4000 bytes) to the "lpszFile" parameter, which will cause a buffer overflow. Any program using this API is potentially affected.
Solution:
For Microsoft Windows 2000 Advanced Server: Reportedly, the vulnerability has been fixed in Windows 2000 Service Pack 4:
Links:
http://www.lac.co.jp/security/english/snsadv_e/65_e.html
