CVE-2004-0201 Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CH...
HighCVSS 10.0
EPSS 45.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| avaya ip600 media servers | All versions | No fix listed |
| avaya definity one media server | All versions | No fix listed |
| avaya s8100 | All versions | No fix listed |
| avaya modular messaging message storage server | = s3400 | No fix listed |
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | = enterprise | No fix listed |
| Microsoft windows 2003 server | = enterprise_64-bit | No fix listed |
| Microsoft windows 2003 server | = r2 | No fix listed |
| Microsoft windows 2003 server | = standard | No fix listed |
| Microsoft windows 2003 server | = web | No fix listed |
| Microsoft windows 98 | All versions | No fix listed |
| Microsoft windows 98se | All versions | No fix listed |
| Microsoft windows me | All versions | No fix listed |
| Microsoft windows nt | = 4.0 | No fix listed |
| Microsoft windows nt | = 4.0-sp1 | No fix listed |
| Microsoft windows nt | = 4.0-sp2 | No fix listed |
| Microsoft windows nt | = 4.0-sp3 | No fix listed |
| Microsoft windows nt | = 4.0-sp4 | No fix listed |
| Microsoft windows nt | = 4.0-sp5 | No fix listed |
| Microsoft windows nt | = 4.0-sp6 | No fix listed |
| Microsoft windows nt | = 4.0-sp6a | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- 20040714 HtmlHelp - .CHM File Heap Overflow mailing-list
- VU#920060 patch third-party-advisory us-government-resource
- TA04-196A patch third-party-advisory us-government-resource
- MS04-023 vendor-advisory
- win-htmlhelp-execute-code(16586) vdb-entry
- oval:org.mitre.oval:def:1503 signature vdb-entry
- oval:org.mitre.oval:def:1530 signature vdb-entry
- oval:org.mitre.oval:def:2155 signature vdb-entry
- oval:org.mitre.oval:def:3179 signature vdb-entry