Microsoft tools ipconfig.exe, forcedos.exe, and mrinfo.exe suffer from buffer overflow and format string vulnerabilities.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/35084/msboftools.txt
Source: https://packetstormsecurity.com/files/35084/msboftools.txt.html