Free buffer overflow vulnerability software for windows

Windows 2000 HyperTerminal Buffer Overflow Vulnerability Patch May 25, 2001 is an update to resolve the 'HyperTerminal Buffer Overflow' security vulnerability in Windows 2000. If you receive and open an HTML e-mail message that contains a particularly malformed Web address (URL), the URL can be used to exploit this vulnerability and run arbitrary code on your computer.

The HyperTerminal application is a utility that installs, by default, on all versions of Windows 98, 98SE, Windows ME, Windows NT, and Windows 2000. The product contains an unchecked buffer in a section of the code that processes Telnet URLs. If a user opened an HTML mail that contained a particularly malformed Telnet URL, it would result in a buffer overrun that could enable the creator of the mail to cause arbitrary code to run on the user?s system. HyperTerminal is the default Telnet client on Windows 98, 98SE and ME. However, it is not the default Telnet client on Windows 2000, and Windows 2000 users who have not taken steps to make it the default Telnet client would not be affected by the vulnerability. (Windows NT4.0 is not affected by this vulnerability. The HyperTerminal client that ships with Windows NT4 does not include a TCP/IP connection method. As such, the NT4 HyperTerminal client cannot be setup as the default telnet client, and would not launch in response to a supplied Telnet URL.)

The HyperTerminal application is a utility that installs, by default, on all versions of Windows 98, 98SE, Windows ME, Windows NT, and Windows 2000. The product contains an unchecked buffer in a section of the code that processes Telnet URLs. If a user opened an HTML mail that contained a particularly malformed Telnet URL, it would result in a buffer overrun that could enable the creator of the mail to cause arbitrary code to run on the user?s system. HyperTerminal is the default Telnet client on Windows 98, 98SE and ME. However, it is not the default Telnet client on Windows 2000, and Windows 2000 users who have not taken steps to make it the default Telnet client would not be affected by the vulnerability. (Windows NT4.0 is not affected by this vulnerability. The HyperTerminal client that ships with Windows NT4 does not include a TCP/IP connection method. As such, the NT4 HyperTerminal client cannot be setup as the default telnet client, and would not launch in response to a supplied Telnet URL.)

Windows 2000 IIS5 Security Patch: HTTPEXT Overflow Vulnerability q286818 is designed to be an enhanced patch which eliminates a security vulnerability in Microsoft Internet Information Services. IIS 5.0 contains a flaw affecting the way that an URL is handled if it has a specific construction and its length is within a very narrow range of values.

Requirements: Windows 2000

Windows 98 Unchecked Buffer Help Security Vulnerability Patch MS02-055 has come as a helpful program designed to prevent a malicious user from running an unauthorized program on your computer. The HTML Help facility in Windows includes an ActiveX control that provides much of its functionality.

One of the functions that is exposed through the control contains an unchecked buffer. This buffer may be exploited by a Web page that is hosted on an attacker's site or that is sent to a user as an HTML message. An attacker who successfully exploits the vulnerability can run code in the security context of the user, and as a result, an attacker can gain the same privileges as the user on the computer.