high7.5Public exploit code
CVE-2002-0823
Buffer overflow in Winhlp32.exe allows remote attackers to execute arbitrary code via an HTML document that calls the HTML Help ActiveX control (HHCtrl.ocx) wi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows 95/98/2000/NT 4.0 - WinHlp Item Buffer Overflow2002-05-27 · remote · windows · Verified
Impact
Buffer overflow in Winhlp32.exe allows remote attackers to execute arbitrary code via an HTML document that calls the HTML Help ActiveX control (HHCtrl.ocx) with a long pathname in the Item parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows Help | All versions |
| Microsoft | Windows 2000 | All versions |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=102822806329440&w=2
- http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3Bq293338
- http://www.iss.net/security_center/static/9746.php
- http://www.osvdb.org/2991
- http://www.securityfocus.com/bid/4857
- http://marc.info/?l=bugtraq&m=102822806329440&w=2
- http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3Bq293338
- http://www.iss.net/security_center/static/9746.php
- http://www.osvdb.org/2991
- http://www.securityfocus.com/bid/4857