critical10.0Public exploit code
CVE-2009-0133
Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a long "Inde…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft HTML Help Workshop 4.74 - '.hhp' Index Buffer Overflow (Metasploit) (3)2010-09-25 · local · windows · Verified
- Microsoft HTML Help Workshop 4.74 - '.hhp' Local Buffer Overflow (1)2009-12-05 · local · windows · Verified
- Microsoft HTML Workshop 4.74 - Universal Buffer Overflow2009-01-12 · local · windows · Verified
- Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (3)2006-02-14 · local · windows · Verified
- Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (2)2006-02-11 · local · windows · Verified
- Microsoft HTML Help Workshop - '.hhp' Denial of Service2006-02-10 · dos · windows · Verified
- Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (1)2006-02-06 · local · windows · Verified
Impact
Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a long "Index file" field, possibly a related issue to CVE-2006-0564.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Html Help Workshop | Version 4.74 |