Microsoft Windows Explorer - '.zip' Denial of Service

Author: fl0 fl0w
type: dos
platform: windows
port: 0
date_added: 2008-09-27
date_updated: 
verified: 1
codes: OSVDB-49897;CVE-2008-4323
tags: 
aliases: 2008-ExplorerDOS.zip
screenshot_url: 
application_url: 

Sucessfully tested on Microsoft Windows Xp Pro sp3 English.
If you open with Winzip sometimes the exeption doesen't occur.
Just right click the file and explorer will crash.
|---
CMP BYTE PTR DS:[EDX+EAX-1],2E

ESP 0007E328
EBP 0007E358

Access Violation [FFFFFFFF]
---|

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/6616.zip (2008-ExplorerDOS.zip)

# milw0rm.com [2008-09-28]