Lucene search

[email protected]CVE-2006-4138

HistoryAug 14, 2006 - 11:04 p.m.

CVE-2006-4138

2006-08-1423:04:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-4138

microsoft

windows

help file

winhlp32.exe

vulnerability

user-assisted

arbitrary code

nvd

8.3 High

AI Score

Confidence

Low

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.012 Low

EPSS

Percentile

84.6%

JSON

Multiple unspecified vulnerabilities in Microsoft Windows Help File viewer (winhlp32.exe) allow user-assisted attackers to execute arbitrary code via crafted HLP files.

CPENameOperatorVersion
microsoft:help_file_viewermicrosoft help file viewereq*

CPE	Name	Operator	Version
microsoft:help_file_viewer	microsoft help file viewer	eq	*

References

securityreason.com/securityalert/1382

www.securityfocus.com/archive/1/443034/100/0/threaded

www.securityfocus.com/archive/1/443039/100/0/threaded

www.securityfocus.com/bid/19490

8.3 High

AI Score

Confidence

Low

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.012 Low

EPSS

Percentile

84.6%

JSON