Description
Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041.
References
- oval:org.mitre.oval:def:2155 vdb-entry signature
- VU#920060 third-party-advisory
- TA04-196A third-party-advisory
- oval:org.mitre.oval:def:1530 vdb-entry signature
- oval:org.mitre.oval:def:1503 vdb-entry signature
- MS04-023 vendor-advisory
- 20040714 HtmlHelp - .CHM File Heap Overflow mailing-list
- oval:org.mitre.oval:def:3179 vdb-entry signature
- win-htmlhelp-execute-code(16586) vdb-entry