CVE-2002-0693
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
35Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 31%
from disclosure to weapon2 days
Published on NVDOct 5
1st PoC+2d
Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via (1) a long parameter to the Alink function, or (2) script containing a long argument to the showHelp function.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/21902⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://marc.info/?l=bugtraq&m=103365849505409&w=2http://marc.info/?l=bugtraq&m=103419115517344&w=2http://marc.info/?l=bugtraq&m=103435279404182&w=2https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-055https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A374http://www.iss.net/security_center/static/10253.phphttp://www.securityfocus.com/bid/5874