CVE-2004-0575
Windows XP and Windows Server 2003 - Remote Code Execution via Compressed Folder Integer Overflow
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2004-0575. PoCs published by ATmaCA, tarako.
AI-analyzed exploit summary The writeup describes a buffer overflow vulnerability in GetRight's DUNZIP32.DLL (4.0.0.3) triggered by a malicious skin file (*.grs). The exploit involves a crafted skin file that, when loaded, executes arbitrary code due to the overflow.
Description
Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to execute arbitrary code via compressed (zipped) folders that involve an "unchecked buffer" and improper length validation.
Exploits (2)
The writeup describes a buffer overflow vulnerability in GetRight's DUNZIP32.DLL (4.0.0.3) triggered by a malicious skin file (*.grs). The exploit involves a crafted skin file that, when loaded, executes arbitrary code due to the overflow.
This exploit targets CVE-2004-0575, a vulnerability in Microsoft Windows' handling of compressed (zipped) folders. It crafts a malicious ZIP file with a long filename containing shellcode and a URL, triggering a buffer overflow when the file is opened in Windows Explorer.