Microsoft Windows "April Fools 2001" Vulnerability
BID:180
Info
Microsoft Windows "April Fools 2001" Vulnerability
| Bugtraq ID: | 180 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Unknown |
| Local: | Unknown |
| Published: | Jan 07 1999 12:00AM |
| Updated: | Jan 07 1999 12:00AM |
| Credit: | This vulnerbaility was posted to NTBugtraq by Richard M. Smith. |
| Vulnerable: |
Microsoft Windows NT 4.0 SP3 Microsoft Windows NT 4.0 SP2 Microsoft Windows NT 4.0 SP1 Microsoft Windows NT 4.0 Microsoft Windows 98 |
| Not Vulnerable: | |
Discussion
Microsoft Windows "April Fools 2001" Vulnerability
Beginning April 1, 2001 and continuing through April 8, 2001, Windows applications will be offset by one hour - even though the system clock will show the proper time. This is due to the MSVCRT.DLL not correctly interpreting Daylight Savings time during any year in which April 1st falls on a Sunday. In these instances, the DLL is fooled into thinking that DST begins one week later on April 8th.
MSVCRT.DLL shipping with MS VC++ versions 4.1, 4.2, 5.0 and 6.0 are thought to be vulnerable.
Beginning April 1, 2001 and continuing through April 8, 2001, Windows applications will be offset by one hour - even though the system clock will show the proper time. This is due to the MSVCRT.DLL not correctly interpreting Daylight Savings time during any year in which April 1st falls on a Sunday. In these instances, the DLL is fooled into thinking that DST begins one week later on April 8th.
MSVCRT.DLL shipping with MS VC++ versions 4.1, 4.2, 5.0 and 6.0 are thought to be vulnerable.