EIP-2026-115777

This is a writeup describing a non-exploitable Unicode buffer overflow in cmd.exe's TYPE command when used with an overly long extension for the CON device file. The vulnerability is mitigated by SafeSEH protections in cmd.exe and its DLLs.