CVE-2004-0201
15Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 45%
probabilidad de explotación
45%top 1% de las CVE
explotación observada
noninguna fuente lo reporta
Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041.
Productos afectados
n/a · n/aReferencias
http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023919.htmlhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-023https://exchange.xforce.ibmcloud.com/vulnerabilities/16586https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1503https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1530https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2155https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3179http://www.kb.cert.org/vuls/id/920060http://www.us-cert.gov/cas/techalerts/TA04-196A.html