Description
Heap-based buffer overflow in Microsoft Windows Help winhlp32.exe allows user-assisted attackers to execute arbitrary code via crafted embedded image data in a .hlp file.
References
- win-winhlp32-hlp-bo(25573) vdb-entry
- http://www.open-security.org/advisories/15
- 20060413 Windows Help Heap Overflow mailing-list
- 700 third-party-advisory
- 20060331 Windows Help Heap Overflow mailing-list
- 17325 vdb-entry