SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2002-0693

Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via (1) a long…

HIGH 7.5EPSS 31.3%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 31.3%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.

Description

Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via (1) a long parameter to the Alink function, or (2) script containing a long argument to the showHelp function.

CVSS 2.0
7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
31.34% probability · 98th percentile
CISA KEV
Not listed
Affected
microsoft/windows 2000 · microsoft/windows 2000 terminal services · microsoft/windows 98 · microsoft/windows 98se · microsoft/windows me · microsoft/windows nt · microsoft/windows xp
Source
cve@mitre.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.