Hi All:

There is a buffer overflow condition in WinNT AT command.

With the little time I spent playing around, I find that given a string long enough it causes AT to "Dr.Watson". The exact byte seems to be BYTE #142.

However, the EIP is not overwritten fully. So, I don't think there is much of an exploit here.

Just in case, thought I'd let you guyz in onto this...

Signed,
FoxThree