Lucene search
HistoryFeb 06, 2006 - 11:02 p.m.
CVE-2006-0564
cve-2006-0564
microsoft
html help workshop
buffer overflow
arbitrary code execution
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.635 Medium
EPSS
Percentile
97.9%
Stack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier versions, and as included in the Microsoft HTML Help 1.4 SDK, allows context-dependent attackers to execute arbitrary code via a .hhp file with a long Contents file field.
Affected configurations
Node
microsofthtml_helpMatch1.4sdk
ORmicrosofthtml_help_workshopMatch4.74.8702.0
Related
cert
cert
Microsoft HTML Help Workshop buffer overflow
2006-02-13 00:00:00
nvd
nvd
CVE-2006-0564
2006-02-06 23:02:00
CVE-2009-0133
2009-01-15 17:30:00
packetstorm
packetstorm
HTML Help Workshop 4.74 (hhp Project File) Buffer Overflow Exploit
2009-12-31 00:00:00
cvelist
cvelist
CVE-2006-0564
2006-02-06 23:00:00
CVE-2009-0133
2009-01-15 17:00:00
prion
prion
Stack overflow
2006-02-06 23:02:00
Buffer overflow
2009-01-15 17:30:00
cve
cve
CVE-2009-0133
2009-01-15 17:30:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.635 Medium
EPSS
Percentile
97.9%
Related for CVE-2006-0564