From: Clifford Hammerschmidt (chammers@PIM.BC.CA)
To: BUGTRAQ@netspace.org
Date: Thu, 11 Feb 1999 11:25:01 -0800
Subject: NT too? Re: Another Windows98 Bug...

The following perl script will create a 250 character file that will crash
WinNT (service pack 3) explorer when right-clicked on:
--------------------
$fn = 'A' x 250;
open (FH,">$fn") or die ":$!\n";
print FH "it worked?";
close FH;
--------------------

You may have to create the file inside a subdirectory. I think what is
happening here is the path+filename exceeds MAX_PATH.

To delete the file drop to a command window and delete it using it's
shortname (dir /X will display shortnames).

At 05:49 PM 2/9/98 -0800, you wrote:
>>>>
I'm not sure about the details of this problem, but when testing another
buffer overflow, I created a long filename called "testfile.txt


                                                          "
(note the chr(160)'s at the end) It is 235 characters in length.  After
creating it on my desktop, I right clicked on it; explorer crashed saying
it caused an illegal operation.  the only way I found to close this was by
using command.com  I sent this to a friend and he got the same error.

<<<<