CVE-2006-0564

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Microsoft HTML Help Workshop 4.74 - '.hhp' compiled Buffer Overflow (Metasploit) (4)2010-09-25 · local · windows · Verified
• Microsoft HTML Help Workshop 4.74 - '.hhp' Cotent Buffer Overflow (Metasploit) (2)2010-09-25 · local · windows · Verified
• Microsoft HTML Help Workshop 4.74 - '.hhp' Local Buffer Overflow (1)2009-12-05 · local · windows · Verified
• Microsoft HTML Workshop 4.74 - Universal Buffer Overflow2009-01-12 · local · windows · Verified
• Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (3)2006-02-14 · local · windows · Verified
• Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (2)2006-02-11 · local · windows · Verified
• Microsoft HTML Help Workshop - '.hhp' Denial of Service2006-02-10 · dos · windows · Verified
• Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (1)2006-02-06 · local · windows · Verified

Impact

Stack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier versions, and as included in the Microsoft HTML Help 1.4 SDK, allows context-dependent attackers to execute arbitrary code via a .hhp file with a long Contents file field.

Affected products

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/18740
• http://securitytracker.com/id?1015585
• http://users.pandora.be/bratax/advisories/b008.html
• http://www.kb.cert.org/vuls/id/124460
• http://www.osvdb.org/22941
• http://www.vupen.com/english/advisories/2006/0446
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24481
• http://secunia.com/advisories/18740
• http://securitytracker.com/id?1015585
• http://users.pandora.be/bratax/advisories/b008.html
• http://www.kb.cert.org/vuls/id/124460
• http://www.osvdb.org/22941
• http://www.vupen.com/english/advisories/2006/0446
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24481