What is CVE-2002-0823?

CVE-2002-0823 is a vulnerability in N/a. Published 2003-04-02.

Is CVE-2002-0823 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2002-0823

Buffer overflow in Winhlp32.exe allows remote attackers to execute arbitrary code via an HTML document that calls the HTML Help ActiveX control (HHCtrl.ocx) with a long pathname in the Item parameter.

EPSS: 0.646 (98.5th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

4857 (vdb-entry, x_refsource_BID)
2991 (x_refsource_OSVDB, vdb-entry)
htmlhelp-item-bo(9746) (vdb-entry, x_refsource_XF)
Q293338 (vendor-advisory, x_refsource_MSKB)
20020801 Winhelp32 Remote Buffer Overrun (mailing-list, x_refsource_BUGTRAQ)

Frequently asked questions

What is CVE-2002-0823?: CVE-2002-0823 is a vulnerability in N/a. Published 2003-04-02.
Is CVE-2002-0823 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.