CVE-2007-0427

EPSS 31.0%

Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitrary code via a help project (.HPJ) file with a long HLP field in the OPTIONS section.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/3149unverified exploitdbwww.exploit-db.com/exploits/3159unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/31899 http://secunia.com/advisories/23862 http://securityreason.com/securityalert/2177 http://www.anspi.pl/~porkythepig/visualization/hpj-x01.cpp http://www.securityfocus.com/archive/1/457436/100/0/threaded http://www.securityfocus.com/bid/22135