Lucene search
HistoryApr 02, 2003 - 5:00 a.m.
CVE-2002-0823
cve-2002-0823
buffer overflow
winhlp32.exe
remote code execution
html
activex control
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
High
0.183 Low
EPSS
Percentile
96.2%
Buffer overflow in Winhlp32.exe allows remote attackers to execute arbitrary code via an HTML document that calls the HTML Help ActiveX control (HHCtrl.ocx) with a long pathname in the Item parameter.
Affected configurations
Node
microsoftwindows_help
Node
microsoftwindows_2000sp1
ORmicrosoftwindows_2000sp2
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:windows_help | microsoft windows help | eq | * |
Related
checkpoint_advisories
checkpoint_advisories
Microsoft Windows WinHlp Item Buffer Overflow - Ver2 (CVE-2002-0823)
2014-04-16 00:00:00
cvelist
cvelist
CVE-2002-0823
2003-04-02 05:00:00
nvd
nvd
CVE-2002-0823
2002-08-12 04:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
High
0.183 Low
EPSS
Percentile
96.2%
Related for CVE-2002-0823