On three separate XP PC's where the problem existed this patch seems
to help. If this is the fix we need to roll out to
existing XP PC's and include in build procedures.
821557: Security Update (Windows XP)
An identified security issue in Microsoft Windows could allow an
attacker to compromise a Microsoft Windows-based system
and then take a variety of actions. For example, an attacker could
execute code on the system. By installing this update, you
can help protect your computer. After you install this item, you may
have to restart your computer.
MS03-027: An Unchecked Buffer in the Windows Shell Could Permit Your
System to Be Compromised
The information in this article applies to:
Microsoft Windows XP Professional SP1
Microsoft Windows XP Home Edition SP1
SYMPTOMS
The Windows shell is responsible for providing the basic framework of
the Windows user interface experience. The shell is
most familiar as the Windows desktop. The shell also provides a
variety of other functions to help define your computing
session, including organizing files and folders, and providing the
means to start programs.
An unchecked buffer exists in a function that is used by the Windows
shell to extract custom attribute information from
some folders. A security vulnerability occurs because a malicious user
can construct an attack that can exploit this flaw and
run code on your computer.
An attacker could seek to exploit this vulnerability by creating a
Desktop.ini file that contains a corrupted custom attribute,
and then host it on a network share. If a user browses the shared
folder where the file is stored, the vulnerability could be
exploited. A successful attack could either cause the Windows shell to
fail or cause an attacker's code to run on the user's
computer in the security context of the user. Mitigating factors:
In the case when an attacker's code is executed, the code would run in
the security context of the user. As a result, any
limitations on the user's ability would also restrict the actions that
an attacker's code could take.
An attacker could only seek to exploit this vulnerability by hosting a
malicious file on a share.
This vulnerability affects only Windows XP Service Pack 1 (SP1). If
you are running the original released version of Windows
XP, your computer is not affected.
http://support.microsoft.com/default.aspx?scid=kb;en-us;821557
Even though it states nothing about the deletion error it fix our
problems. Enjoy. Paypal is accepted. haha.
