Microsoft Windows XP Nested Directory Denial of Service Vulnerability

Bugtraq ID:	7789
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	No
Local:	Yes
Published:	Jun 02 2003 12:00AM
Updated:	Jun 02 2003 12:00AM
Credit:	The discovery of this vulnerability has been credited to "[email protected]" <[email protected]>.
Vulnerable:	Microsoft Windows XP Tablet PC Edition Microsoft Windows XP Professional SP1 Microsoft Windows XP Professional Microsoft Windows XP Media Center Edition Microsoft Windows XP Home SP1 Microsoft Windows XP Home Microsoft Windows XP Embedded SP1 Microsoft Windows XP Embedded Microsoft Windows XP 64-bit Edition SP1 Microsoft Windows XP 64-bit Edition
Not Vulnerable:

Microsoft Windows XP Nested Directory Denial of Service Vulnerability

A vulnerability has been reported for all versions of Microsoft Windows XP. The problem is said to occur due to Windows failing to handle certain conditions involving multiple nested directories.

By nesting 122 folders within eachother and accessing a menu for the last folder, a malicious local user may be capable of crashing the system.

Microsoft Windows XP Nested Directory Denial of Service Vulnerability

No exploit required.

Microsoft Windows XP Nested Directory Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.