Microsoft Program Group Converter contains a buffer overflow that may allow an attacker to execute arbitrary code.
Microsoft describes Program Group Converter (grpconv.exe) as a application to "convert Program Manager Group files [.grp extention] that were created in Windows 3.1, Windows 3.11, Windows for Workgroups 3.1, and Windows for Workgroups 3.11 so that they could be used by later operating systems. This application is also used during Windows Setup and by third-party applications during the installation of applications or devices."
A vulnerability has been discovered in Microsoft's Program Group Converter. Quoting from Microsoft Security Bulletin MS04-037:
If a remote attacker can persuade a user to access a specially crafted Program Group (.grp) file that, the attacker may be able to execute arbitrary code on the compromised system, possibly with administrator privileges.
Microsoft has published Microsoft Security Bulletin MS04-037 to address this vulnerability.
This document was written by Jeff Gennari.
|Date First Published:||2004-10-15|
|Date Last Updated:||2004-10-15 15:22 UTC|