Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2004-0201
HistoryAug 06, 2004 - 4:00 a.m.

CVE-2004-0201

2004-08-0604:00:00
[email protected]
web.nvd.nist.gov
51
cve
buffer overflow
htmlhelp
remote code execution
security vulnerability
microsoft windows 98
windows me
windows nt
windows 2000
windows xp
server 2003
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.477 Medium

EPSS

Percentile

97.5%

JSON

Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041.

Affected configurations

NVD
Node
avayaip600_media_servers
OR
avayadefinity_one_media_server
OR
avayas8100
Node
avayamodular_messaging_message_storage_serverMatchs3400
OR
microsoftwindows_2000
OR
microsoftwindows_2000sp1
OR
microsoftwindows_2000sp2
OR
microsoftwindows_2000sp3
OR
microsoftwindows_2000sp4
OR
microsoftwindows_2003_serverMatchenterprise64-bit
OR
microsoftwindows_2003_serverMatchenterprise_64-bit
OR
microsoftwindows_2003_serverMatchr264-bit
OR
microsoftwindows_2003_serverMatchr2datacenter_64-bit
OR
microsoftwindows_2003_serverMatchstandard64-bit
OR
microsoftwindows_2003_serverMatchweb
OR
microsoftwindows_98gold
OR
microsoftwindows_98se
OR
microsoftwindows_me
OR
microsoftwindows_ntMatch4.0enterprise_server
OR
microsoftwindows_ntMatch4.0server
OR
microsoftwindows_ntMatch4.0terminal_server
OR
microsoftwindows_ntMatch4.0workstation
OR
microsoftwindows_ntMatch4.0sp1enterprise_server
OR
microsoftwindows_ntMatch4.0sp1server
OR
microsoftwindows_ntMatch4.0sp1terminal_server
OR
microsoftwindows_ntMatch4.0sp1workstation
OR
microsoftwindows_ntMatch4.0sp2enterprise_server
OR
microsoftwindows_ntMatch4.0sp2server
OR
microsoftwindows_ntMatch4.0sp2terminal_server
OR
microsoftwindows_ntMatch4.0sp2workstation
OR
microsoftwindows_ntMatch4.0sp3enterprise_server
OR
microsoftwindows_ntMatch4.0sp3server
OR
microsoftwindows_ntMatch4.0sp3terminal_server
OR
microsoftwindows_ntMatch4.0sp3workstation
OR
microsoftwindows_ntMatch4.0sp4enterprise_server
OR
microsoftwindows_ntMatch4.0sp4server
OR
microsoftwindows_ntMatch4.0sp4terminal_server
OR
microsoftwindows_ntMatch4.0sp4workstation
OR
microsoftwindows_ntMatch4.0sp5enterprise_server
OR
microsoftwindows_ntMatch4.0sp5server
OR
microsoftwindows_ntMatch4.0sp5terminal_server
OR
microsoftwindows_ntMatch4.0sp5workstation
OR
microsoftwindows_ntMatch4.0sp6enterprise_server
OR
microsoftwindows_ntMatch4.0sp6server
OR
microsoftwindows_ntMatch4.0sp6terminal_server
OR
microsoftwindows_ntMatch4.0sp6workstation
OR
microsoftwindows_ntMatch4.0sp6aenterprise_server
OR
microsoftwindows_ntMatch4.0sp6aserver
OR
microsoftwindows_ntMatch4.0sp6aworkstation
OR
microsoftwindows_xp64-bit
OR
microsoftwindows_xphome
OR
microsoftwindows_xpgoldprofessional
OR
microsoftwindows_xpsp164-bit
OR
microsoftwindows_xpsp1home

Related

nessus 1
securityvulns 1
nvd 3
cvelist 3
cert 2
checkpoint_advisories 1
cve 2
nessus
nessus
MS04-023: Vulnerability in HTML Help Could Allow Code Execution (840315)
2004-07-13 00:00:00
securityvulns
securityvulns
Microsoft Security Bulletin MS04-023
2004-07-14 00:00:00
nvd
nvd
CVE-2004-0201
2004-08-06 04:00:00
CVE-2004-0475
2004-07-07 04:00:00
CVE-2003-1041
2004-06-14 04:00:00
cvelist
cvelist
CVE-2004-0201
2004-07-14 04:00:00
CVE-2003-1041
2004-05-20 04:00:00
CVE-2004-0475
2004-05-20 04:00:00
cert
cert
Microsoft Windows HTML Help component fails to properly validate input data
2004-07-14 00:00:00
Microsoft Windows fails to properly process showHelp URLs
2004-07-14 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft showHelp (MS04-023; CVE-2003-1041)
2009-10-07 00:00:00
cve
cve
CVE-2003-1041
2004-06-14 04:00:00
CVE-2004-0475
2004-07-07 04:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.477 Medium

EPSS

Percentile

97.5%

JSON
Related for CVE-2004-0201
nessus1securityvulns1nvd3cvelist3cert2checkpoint_advisories1cve2