D 2012-11-21T15:52:53.158
J comment I\swish\sto\srun:\r\nsqlite3.exe\ssome_database_name.db3\r\n\r\nWhile\ssome_database_name.db3\scontains\ssome\snon-ascii\schars,\sI\sam\sin\strouble!\ssqlite3.exe\sexpects\sthis\sparameter\sin\sUTF-8.\sIt\sis\snot\susual,\sand\sI\sam\sunable\sto\swrite\sit\sby\skeyboard\sin\swindows\scommandline\sshell.\r\n\r\nI\sam\sexpecting\sall\sprogram\sparameters\sto\sbe\sin\snative\swindows\sencoding,\sand\sconversion\sfrom\snative\swindows\sencoding\sto\sUTF-8\sis\smade\sinside\ssqlite3.exe.\r\n\r\nThen\sI\scan\swrite\snon-ascii\spath\sin\scommandline\sshell\sby\sOEM\sencoding,\sthen\sI\scan\srun\sit\sby\sCreateprocessA\sWin32API\sas\sANSI\sencoding\sor\sby\sCreateProcessW\sWin32API\sas\swidechar.
J detected Structural_Testing
J foundin 3.7.14.1
J private_contact 5622daa5fb452498d0b3d05600106fca2bc3174f
J severity Important
J status Open
J subsystem Shell
J title sqlite3.exe\s-\swrong\sparameter\scharset
K 01b785eefa32b6b7322318a94d61e9b0171e12c0
U
Z ba1dbd4af7297c357f8934bc073f1779
|