Free recompile with xlint unchecked for details software for windows

Microsoft Windows XP (64-bit) Unchecked Buffer Vulnerability Patch is developed as a useful and essential patch which offers the basic framework of the Windows user interface experience. It is most familiar to users as the Windows Desktop, but also provides a variety of other functions to help define the user's computing session, including organizing files and folders, and providing the means to start applications.

An unchecked buffer exists in one of the functions used by the Windows Shell to extract custom attribute information from audio files. A security vulnerability results because it is possible for a malicious user to mount a buffer overrun attack and attempt to exploit this flaw.

An attacker could seek to exploit this vulnerability by creating an MP3 or a WMA file that contains a corrupt custom attribute and then host it on a Web site or on a network share, or send it via an HTML e-mail. If a user were to hover his or her mouse pointer over the icon for the file (either on a Web page or on the local disk), or open the shared folder where the file is stored, the vulnerable code would be invoked. An HTML e-mail could cause the vulnerable code to be invoked when a user opens or previews the e-mail. A successful attack could have the effect of either causing the Windows Shell to fail, or causing an attacker's code to run on the user's computer in the security context of the user.

Microsoft Windows XP (32-bit) Unchecked Buffer Vulnerability Patch MS02-072 is a patch stopping malicious users from compromising your computer and gaining complete control over your Windows XP system. The Windows Shell is responsible for providing the basic framework of the Windows user interface experience. It is most familiar to users as the Windows Desktop, but also provides a variety of other functions to help define the user's computing session, including organizing files and folders, and providing the means to start applications.

An unchecked buffer exists in one of the functions used by the Windows Shell to extract custom attribute information from audio files. A security vulnerability results because it is possible for a malicious user to mount a buffer overrun attack and attempt to exploit this flaw.

An attacker could seek to exploit this vulnerability by creating an MP3 or a WMA file that contains a corrupt custom attribute and then host it on a Web site or on a network share, or send it via an HTML e-mail. If a user were to hover his or her mouse pointer over the icon for the file (either on a Web page or on the local disk), or open the shared folder where the file is stored, the vulnerable code would be invoked. An HTML e-mail could cause the vulnerable code to be invoked when a user opens or previews the e-mail. A successful attack could have the effect of either causing the Windows Shell to fail, or causing an attacker's code to run on the user's computer in the security context of the user.

For more information about the vulnerabilities this update addresses, read the associated Microsoft Security Bulletin.

Microsoft ASP.NET Unchecked Buffer Vulnerability patch MS02-026 is a useful tool designed with the ability to resolve an unchecked buffer in one of the routines which handles the processing of cookies in StateServer mode, resulting in a security vulnerability. When working with Microsoft ASP.NET, a component of the Microsoft .NET Framework provides for session state management through a variety of modes.

One such mode, called StateServer, stores session state information in a separate running process that can run on either the same machine as the ASP.NET-based application or on a different machine.

Windows NT SNMP Unchecked Buffer Vulnerability Patch MS02-006 provides such a convenient as well as powerful Internet standard protocol for managing disparate network devices such as firewalls, computers, and routers.

All versions of Windows except Windows ME provide an SNMP implementation, which is neither installed nor running by default in any version. A buffer overrun is present in all implementations. By sending a specially malformed management request to a system running an affected version of the SNMP service, an attacker could cause a denial of service.

In addition, it is possible that he could cause code to run on the system in LocalSystem context. This could potentially give the attacker the ability to take any desired action on the system.

Requirements: Windows NT

Microsoft Data Access Components 2.6 Unchecked Buffer Vulnerability Patch MS02-040 is a simple to use, yet sophisticated utility which can provide a number of supporting technologies for accessing and using databases. Included among these functions is the underlying support for the T-SQL OpenRowSet command. A security vulnerability results because the MDAC functions underlying OpenRowSet contain an unchecked buffer.

An attacker who successfully exploited it would be able to take action with all the privileges of an affected SQL Server. At a minimum, this would grant the attacker complete control over the database, and potentially could grant administrative privileges at the operating system level as well.

Microsoft Windows 2000 Unchecked Buffer in Telnet Server 1.0 is a reliable and useful protocol which provides remote shell capabilities.

Microsoft has implemented the Telnet protocol by providing a Telnet Server in several products. The implementations in two of these products ? Windows 2000 and Interix 2.2 ? contain unchecked buffers in the code that handles the processing of telnet protocol options.

An attacker could use this vulnerability to perform a buffer overflow attack. A successful attack could cause the Telnet Server to fail, or in some cases, could possibly allow an attacker to execute code of her choice on the system. Such code would execute using the security context of the Telnet service, but this context varies from product to product. In Windows 2000, the Telnet service always runs as System; in the Interix implementation, the administrator selects the security context in which to run as part of the installation process.