Vulnerability in N/a
CVE-2004-0201
Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a dif…
EPSS: 0.507 (97.9th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
References
- oval:org.mitre.oval:def:2155 (signature, x_refsource_OVAL, vdb-entry)
- VU#920060 (x_refsource_CERT-VN, third-party-advisory)
- TA04-196A (x_refsource_CERT, third-party-advisory)
- oval:org.mitre.oval:def:1530 (signature, x_refsource_OVAL, vdb-entry)
- oval:org.mitre.oval:def:1503 (signature, x_refsource_OVAL, vdb-entry)
- MS04-023 (x_refsource_MS, vendor-advisory)
- 20040714 HtmlHelp - .CHM File Heap Overflow (mailing-list, x_refsource_FULLDISC)
- oval:org.mitre.oval:def:3179 (signature, x_refsource_OVAL, vdb-entry)
- win-htmlhelp-execute-code(16586) (vdb-entry, x_refsource_XF)