medium5.1Public exploit code
CVE-2004-1306
Heap-based buffer overflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows XP/2000/2003 - 'winhlp32' Phrase Integer Overflow2004-12-23 · remote · windows · Verified
Impact
Heap-based buffer overflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via a crafted .hlp file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 2000 | All versions |
| Microsoft | Windows 2003 Server | Versions datacenter_64-bit, enterprise, enterprise_64-bit, r2, standard, web |
| Microsoft | Windows Nt | Version 4.0 |
| Microsoft | Windows Xp | All versions |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=110383690219440&w=2
- http://www.securityfocus.com/bid/12092
- http://www.xfocus.net/flashsky/icoExp/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18678
- http://marc.info/?l=bugtraq&m=110383690219440&w=2
- http://www.securityfocus.com/bid/12092
- http://www.xfocus.net/flashsky/icoExp/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18678