CVE-2006-0564

EPSS 71.5%

Stack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier versions, and as included in the Microsoft HTML Help 1.4 SDK, allows context-dependent attackers to execute arbitrary code via a .hhp file with a long Contents file field.

Affected products

n/a · n/a

public PoCs found — 8

exploitdbwww.exploit-db.com/exploits/1488unverified exploitdbwww.exploit-db.com/exploits/1470unverified exploitdbwww.exploit-db.com/exploits/1490unverified exploitdbwww.exploit-db.com/exploits/1495unverified exploitdbwww.exploit-db.com/exploits/16683unverified exploitdbwww.exploit-db.com/exploits/16648unverified exploitdbwww.exploit-db.com/exploits/10321unverified exploitdbwww.exploit-db.com/exploits/7727unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/18740 http://securitytracker.com/id?1015585 https://exchange.xforce.ibmcloud.com/vulnerabilities/24481 http://users.pandora.be/bratax/advisories/b008.html http://www.kb.cert.org/vuls/id/124460 http://www.osvdb.org/22941 http://www.vupen.com/english/advisories/2006/0446