OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Alun Jones (aluntexis.com)
Date: Wed Feb 27 2002 - 18:03:17 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    At 04:00 AM 2/27/2002, ][-][UNTER wrote:
    >BPM STUDIO PRO 4.2 is one of the most famous mp3 mixer and player and it has
    >an http server implementation for manage the player via the web browser.
    >
    >Unfortunatly, when you perform a simple http request like:
    >http://BPM-HOST/con/con
    >you can crash instantly non-patched Win9x host with a simple Blue Screen !!

    This old chestnut again?

    This is an _operating_system_ issue. There's very little that an app could
    do, even if it wanted to, to protect against this particular crash.

    As noted, there is a patch out there for vulnerable operating systems - why
    are we still seeing this reported as an application bug?

    Alun.
    ~~~~ 

    --
Texas Imperial Software   | Try WFTPD, the Windows FTP Server. Find us at
1602 Harvest Moon Place   | http://www.wftpd.com or email aluntexis.com
Cedar Park TX 78613-1419  | VISA/MC accepted.  NT-based sites, be sure to
Fax/Voice +1(512)258-9858 | read details of WFTPD Pro for NT.