{"id": "CVE-2006-4138", "bulletinFamily": "NVD", "title": "CVE-2006-4138", "description": "Multiple unspecified vulnerabilities in Microsoft Windows Help File viewer (winhlp32.exe) allow user-assisted attackers to execute arbitrary code via crafted HLP files.", "published": "2006-08-14T19:04:00", "modified": "2018-10-17T17:33:38", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2006-4138", "reporter": "NVD", "references": ["http://www.securityfocus.com/archive/1/443034/100/0/threaded", "http://www.securityfocus.com/archive/1/443039/100/0/threaded", "http://securityreason.com/securityalert/1382", "http://www.securityfocus.com/bid/19490"], "cvelist": ["CVE-2006-4138"], "type": "cve", "lastseen": "2018-10-18T15:05:37", "history": [{"bulletin": {"assessment": {"href": "", "name": "", "system": ""}, "bulletinFamily": "NVD", "cpe": ["cpe:/a:microsoft:help_file_viewer"], "cvelist": ["CVE-2006-4138"], "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "description": "Multiple unspecified vulnerabilities in Microsoft Windows Help File viewer (winhlp32.exe) allow user-assisted attackers to execute arbitrary code via crafted HLP files.", "edition": 1, "enchantments": {"score": {"modified": "2016-09-03T07:23:36", "value": 9.3, "vector": "NONE"}}, "hash": "a8edee90b8c304fcb657a5bd4ecb996708170a1cac525ee6d5cb3898c3251a7b", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "3555915f1725e65201eedcaa47b64741", "key": "title"}, {"hash": "d24fdd153b895c44e6ec755ad4936d7a", "key": "published"}, {"hash": "821e54f0f994b37e8d67d5bca8d9357e", "key": "references"}, {"hash": "e8f10fabf4bfd3860977c6675379a2b4", "key": "href"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "655591f3583121c5e64581f2610d770e", "key": "cpe"}, {"hash": "774fce555a963c00be305187dd6dff95", "key": "cvss"}, {"hash": "fcc0c6892753c2963a2fee3073c3ba50", "key": "modified"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "8e811c9f97d082d9a7f2a429ff6e593b", "key": "description"}, {"hash": "d0d9e115cb0e94cf3c08fdfdf796ef45", "key": "cvelist"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2006-4138", "id": "CVE-2006-4138", "lastseen": "2016-09-03T07:23:36", "modified": "2008-09-05T17:08:57", "objectVersion": "1.2", "published": "2006-08-14T19:04:00", "references": ["http://securityreason.com/securityalert/1382", "http://www.securityfocus.com/bid/19490", "http://www.securityfocus.com/archive/1/archive/1/443039/100/0/threaded", "http://www.securityfocus.com/archive/1/archive/1/443034/100/0/threaded"], "reporter": "NVD", "scanner": [], "title": "CVE-2006-4138", "type": "cve", "viewCount": 0}, "differentElements": ["references", "modified"], "edition": 1, "lastseen": "2016-09-03T07:23:36"}], "edition": 2, "hashmap": [{"key": "assessment", "hash": "6d3f4796275bb54c21a33b82f399cc6d"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "655591f3583121c5e64581f2610d770e"}, {"key": "cvelist", "hash": "d0d9e115cb0e94cf3c08fdfdf796ef45"}, {"key": "cvss", "hash": "774fce555a963c00be305187dd6dff95"}, {"key": "description", "hash": "8e811c9f97d082d9a7f2a429ff6e593b"}, {"key": "href", "hash": "e8f10fabf4bfd3860977c6675379a2b4"}, {"key": "modified", "hash": "b5626183c7ce54f62b92cb279937db66"}, {"key": "published", "hash": "d24fdd153b895c44e6ec755ad4936d7a"}, {"key": "references", "hash": "77a5d499e53e59d58c1c23d3cebb2941"}, {"key": "reporter", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "scanner", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "title", "hash": "3555915f1725e65201eedcaa47b64741"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "edb884d365338573f637b579e698880e1176d09e756be82f186ecf4d54cdacfb", "viewCount": 0, "enchantments": {"score": {"value": 9.3, "vector": "NONE", "modified": "2018-10-18T15:05:37"}, "vulnersScore": 9.3}, "objectVersion": "1.3", "cpe": ["cpe:/a:microsoft:help_file_viewer"], "assessment": {"href": "", "name": "", "system": ""}, "scanner": []}

{"osvdb": [{"lastseen": "2017-04-28T13:20:25", "references": [], "edition": 1, "description": "# No description provided by the source\n\n## References:\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-08/0247.html\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-08/0252.html\n[CVE-2006-4138](https://vulners.com/cve/CVE-2006-4138)\nBugtraq ID: 19490\n", "reporter": "OSVDB", "published": "2006-08-12T02:57:01", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "title": "Microsoft Windows Help File Viewer (winhlp32.exe) HLP File Arbitrary Code Execution", "type": "osvdb", "bulletinFamily": "software", "affectedSoftware": [], "cvelist": ["CVE-2006-4138"], "modified": "2006-08-12T02:57:01", "href": "https://vulners.com/osvdb/OSVDB:29231", "id": "OSVDB:29231", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "exploitdb": [{"lastseen": "2016-02-03T08:02:11", "osvdbidlist": ["29231"], "references": [], "description": "Microsoft Windows XP/2000/2003 Help Multiple Remote Vulnerabilities. CVE-2006-4138. Dos exploit for windows platform", "edition": 1, "reporter": "Benjamin Tobias Franz", "published": "2006-08-12T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 9.3}}, "type": "exploitdb", "title": "Microsoft windows xp/2000/2003 help Multiple Vulnerabilities", "bulletinFamily": "exploit", "cvelist": ["CVE-2006-4138"], "modified": "2006-08-12T00:00:00", "id": "EDB-ID:28381", "href": "https://www.exploit-db.com/exploits/28381/", "sourceData": "source: http://www.securityfocus.com/bid/19490/info\r\n\r\nThe Microsoft Windows Help File viewer (winhlp32.exe) is prone to multiple remote vulnerabilities.\r\n\r\nThese vulnerabilities present themselves when the application handles specially crafted Windows Help (.hlp) files.\r\n\r\nA successful attack may let the attacker crash the application or execute arbitrary code in the context of a vulnerable user who opens a malicious file.\r\n\r\nSpecific information regarding affected versions of Microsoft Windows is currently unavailable.\r\n\r\nUpdate: Since help files can inherently execute arbitrary malicious code, this BID is being retired.\r\n\r\nhttps://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/28381.zip", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "sourceHref": "https://www.exploit-db.com/download/28381/"}]}