Malformed Telnet Argument Vulnerability

The Telnet client that ships as part of Windows 95 and 98 has an unchecked buffer. A specially-malformed argument could be passed to the client via a web page in order to cause arbitrary code to execute on the computer via a classic buffer overrun technique.

Affected Products

• Windows 95, 98 and 98 SE

Solution

A patch is available either from Windows Update or from the locations below:

• Microsoft Windows 95
  http://www.microsoft.com/windows95/downloads/contents/WUCritical/Telnet/Default.asp
• Microsoft Windows 98 and Windows 98 Second Edition
  http://www.microsoft.com/windows98/downloads/contents/WUCritical/Telnet/Default.asp

Further Details

Source: Microsoft Corporation

Reference: Microsoft Corporation

Updated: September 9, 1999

>> Recommended Download - secure your PC from spyware, adware and malware now with Spyware Doctor <<