High Risk Vulnerability in HTML Help (ITSS Parser)

Peter Winter-Smith of NGSSoftware has discovered a high risk vulnerability in one of the dependencies of HTML Help, the InfoTech Storage System parser. This flaw can permit arbitrary code execution through a number of applications including HTML Help, Internet Explorer and Outlook/Outlook Express...

Microsoft Security Bulletin MS05-026 Vulnerability in HTML Help Could Allow Remote Code Execution (896358)

Microsoft Security Bulletin MS05-026 Vulnerability in HTML Help Could Allow Remote Code Execution 896358 Issued: June 14, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Critical...

MS05-026: Vulnerability in HTML Help Could Allow Remote Code Execution (896358)

The remote host contains a version of the HTML Help ActiveX control that is vulnerable to a security flaw that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit this web page. C Tenable Network Security, Inc...

Microsoft Windows HTML Help Remote Code Execution Vulnerability

Description Microsoft Windows HTML Help is affected by a remote code execution vulnerability. The vulnerability presents itself when the application handles malformed data through the InfoTech protocol ms-its, its, mk:@msitstore. An attacker may exploit this issue from a malicious Web page or...

Microsoft HTML Help vulnerable to integer overflow

Overview Microsoft HTML Help contains an integer overflow vulnerability, allowing a remote attacker to execute arbitrary code. Description HTML Help The Microsoft HTML Help system ". . . is the standard help system for the Windows platform." HTML Help components can be compiled to ". . . compress...

Microsoft Windows help viewer vulnerable to heap overflow

Overview A vulnerability exists in the Microsoft Windows help viewer application that could allow a remote attacker to execute code of their choosing on a vulnerable system. Description The Microsoft Windows help viewer winhlp32.exe provides application assistance to users through a special type ...

CVE-2005-1838

Multiple cross-site scripting vulnerabilities in castnewPost.asp in Liberum Help Desk 0.97.3 allow remote attackers to inject arbitrary web script or HTML via the 1 Email, 2 Title, or 3 Description fields...

CVE-2005-1839

The CVE-2005-1839 entry documents multiple SQL injection vulnerabilities in Doug Luxem’s Liberum Help Desk 0.97.3. The flaws allow remote attackers to inject arbitrary SQL via the id parameter to three pages: view.asp, print.asp, and the edit parameter to register.asp. The NVD metrics show a CVSS...

CVE-2005-1838

The CVE-2005-1838 entry concerns Liberum Help Desk 0.97.3, where multiple cross-site scripting vulnerabilities exist in castnewPost.asp. The flaw permits remote attackers to inject arbitrary web script or HTML via the (1) Email, (2) Title, or (3) Description fields. The NVD entry lists a Medium s...

CVE-2005-1839

Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 view.asp or 2 print.asp or 3 edit parameter to register.asp...

CVE-2005-1838

Multiple cross-site scripting vulnerabilities in castnewPost.asp in Liberum Help Desk 0.97.3 allow remote attackers to inject arbitrary web script or HTML via the 1 Email, 2 Title, or 3 Description fields...

CVE-2005-1839

Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 view.asp or 2 print.asp or 3 edit parameter to register.asp...

CVE-2005-1838: Undefined Security Weakness

Multiple cross-site scripting vulnerabilities in castnewPost.asp in Liberum Help Desk 0.97.3 allow remote attackers to inject arbitrary web script or HTML via the 1 Email, 2 Title, or 3 Description fields...

CVE-2005-1839: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 view.asp or 2 print.asp or 3 edit parameter to register.asp...

CVE-2005-1672

Help Center Live (PHP-based live help desk with a MySQL backend) is affected by multiple cross-site scripting (XSS) vulnerabilities identified as CVE-2005-1672. The XSS can be triggered by untrusted input in several fields: the find parameter to index.php, the name or message field of a chat requ...

CVE-2005-1673

CVE-2005-1673 affects Help Center Live (PHP/MySQL) with multiple SQL injection flaws (e.g., id in index.php, tid in view.php, fid in download.php/chat_download.php, status in icon.php, TICKET_tid in index.php/view.php). Root cause: insufficient input sanitization in several parameters leading to ...

CVE-2005-1674

CVE-2005-1674 : The provided documents describe a Cross-Site Request Forgery in Help Center Live (view.php) that allows a remote attacker to perform administrator actions via a link or IMG tag. The Red Hat, CVE, CVE List, Exploit-DB, and Nessus entries concur on the vulnerability class and affect...

CVE-2005-1672

Multiple cross-site scripting XSS vulnerabilities in Help Center Live allow remote attackers to inject arbitrary web script or HTML via the 1 find parameter to index.php, 2 name or 3 message field of a chat request, or 4 the message body when opening a trouble ticket...

CVE-2005-1674

Cross-Site Request Forgery CSRF vulnerability in Help Center Live allows remote attackers to perform actions as the administrator via a link or IMG tag to view.php...

CVE-2005-1672

Multiple cross-site scripting XSS vulnerabilities in Help Center Live allow remote attackers to inject arbitrary web script or HTML via the 1 find parameter to index.php, 2 name or 3 message field of a chat request, or 4 the message body when opening a trouble ticket...