Description
Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a long "Index file" field, possibly a related issue to CVE-2006-0564.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
HTML Help Workshop 4.74 (hhp Project File) Buffer Overflow
exploit/windows/fileformat/hhw_hhp_indexfile_bof
Exploit-DB 7
- Microsoft HTML Help Workshop 4.74 - '.hhp' Index Buffer Overflow (Metasploit) (3) EDB-16631 · local · Sep 25, 2010 · verified
- Microsoft HTML Help Workshop 4.74 - '.hhp' Local Buffer Overflow (1) EDB-10321 · local · Dec 5, 2009 · verified
- Microsoft HTML Workshop 4.74 - Universal Buffer Overflow EDB-7727 · local · Jan 12, 2009 · verified
- Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (3) EDB-1495 · local · Feb 14, 2006 · verified
- Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (2) EDB-1490 · local · Feb 11, 2006 · verified
- Microsoft HTML Help Workshop - '.hhp' Denial of Service EDB-1488 · dos · Feb 10, 2006 · verified
- Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (1) EDB-1470 · local · Feb 6, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.