Test Methods ( Detailed Overview )

DOS 8.3 Filename File Source Disclosure

Remediation Task

Filter out hazardous characters from user input

WASC Classification

Information Disclosure: Information Leakage

Affected Products

DOS Windows

Technical Description

Files can be accessed using the Automatic Short File Name Generation. All DOS and 16-bit Windows require the 8.3 filename creation, even 32-bit version sometimes need them.

Fix Recommendation