Family: Windows : Microsoft Bulletins --> Category: infos
Buffer overrun in Windows Shell (821557) Vulnerability Scan
Vulnerability Scan Summary
Checks for hotfix Q823980
Detailed Explanation for this Vulnerability Test
Arbitrary code can be executed on the remote host through Explorer.
The remote host is running a version of Windows which has a flaw in
its shell. A possible hacker could exploit it by creating a malicious Desktop.ini
file which triggers the flaw, and put it on a shared folder and wait
for someone to browse it.
Microsoft has released a set of patches for Windows XP :
Medium / CVSS Base Score : 6
Click HERE for more information and discussions on this network vulnerability scan.