VulnerabilityModified
CVE-2002-0823
Buffer overflow in Winhlp32.exe allows remote attackers to execute arbitrary code via an HTML document that calls the HTML Help ActiveX control (HHCtrl.ocx) with a long pathname in the Item parameter.
HIGH 7.5EPSS 26.2%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 26.2%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
Buffer overflow in Winhlp32.exe allows remote attackers to execute arbitrary code via an HTML document that calls the HTML Help ActiveX control (HHCtrl.ocx) with a long pathname in the Item parameter.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 26.17% probability · 98th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/windows help · microsoft/windows 2000
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=102822806329440&w=2
- http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3Bq293338
- http://www.iss.net/security_center/static/9746.php
- http://www.osvdb.org/2991
- http://www.securityfocus.com/bid/4857
- http://marc.info/?l=bugtraq&m=102822806329440&w=2
- http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3Bq293338
- http://www.iss.net/security_center/static/9746.php
- http://www.osvdb.org/2991
- http://www.securityfocus.com/bid/4857
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.