JSI Tip 3771. The CMD processor may not properly parse arguments?

Microsoft has discovered a bug in the CMD processor that could cause the CMD processor to hang when a long environment string is passed. This could allow a denial of service attack. The fix corrects some parsing errors in the CMD processor.

Windows 2000

The problem has been corrected in SP2. If SP2 is not installed:

Download Q259622_w2k_sp1_x86_en.exe.

Windows NT 4.0

Intel

Download Q259622i.exe.

Alpha

Download Q259622a.exe.




Hide comments

Comments

  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
Publish