vendor:
MSVCRT.DLL
by:
Richard M. Smith
7.5
CVSS
HIGH
Daylight Savings Time Bug
N/A
CWE
Product Name: MSVCRT.DLL
Affected Version From: MS VC++ versions 4.1, 4.2, 5.0 and 6.0
Affected Version To: MS VC++ versions 4.1, 4.2, 5.0 and 6.0
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
1999
April’s Fools 2001 Bug
Beginning April 1, 2001 and continuing through April 8, 2001, Windows applications will be offset by one hour - even though the system clock will show the proper time. This is due to the MSVCRT.DLL not correctly interpreting Daylight Savings time during any year in which April 1st falls on a Sunday. In these instances, the DLL is fooled into thinking that DST begins one week later on April 8th. MSVCRT.DLL shipping with MS VC++ versions 4.1, 4.2, 5.0 and 6.0 are thought to be vulnerable.
Mitigation:
N/A