CVE-2007-5145 Information

Description

Multiple buffer overflows in system DLL files in Microsoft Windows XP as used by Microsoft Windows Explorer (explorer.exe) 6.00.2900.2180 Don Ho Notepad++ unspecified Adobe Macromedia applications and other programs allow user-assisted remote attackers to cause a denial of service (application crash) via long strings in the (1) author (2) title (3) subject and (4) comment Properties fields of a file possibly involving improper handling of extended file attributes by the (a) NtQueryInformationFile (b) NtQueryDirectoryFile (c) NtSetInformationFile (d) FileAllInformation (e) FileNameInformation and other FILE_INFORMATION_CLASS functions in ntdll.dll and the (f) GetFileAttributesExW and (g) GetFileAttributesW functions in kernel32.dll a related issue to CVE-2007-1347.

Reference

http://lostmon.blogspot.com/2007/06/buffer-overflow-in-extended-file.html http://osvdb.org/41064 http://osvdb.org/41065