Microsoft Windows XP/2000/2003 help - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/19490/info The Microsoft Windows Help File viewer winhlp32.exe is prone to multiple remote vulnerabilities. These vulnerabilities present themselves when the application handles specially crafted Windows Help .hlp files. A successful attack may let the...

Directory traversal

Directory traversal vulnerability in help/index.php in X7 Chat 2.0 and earlier allows remote attackers to include arbitrary files via .. dot dot sequences in the helpfile parameter...

[Full-Disclosure] Remote code execution with parameters without user interaction, even with XP SP2

PoC called CMDExe: http://www.freewebs.com/shreddersub7/htm.htm Discussion: http://www.freewebs.com/shreddersub7/expl-discuss.htm ------------------Which systems are vulnerable?-------- Any system running any Microsoft Windows XP edition with Internet Explorer 6 or higher, even with SP2 applied...

Microsoft Windows XP20002003 - winhlp32 Phrase Heap Overflow

Microsoft Windows XP20002003 - winhlp32 Phrase Heap Overflow source: https://www.securityfocus.com/bid/12092/info Microsoft Windows is prone to a heap-based buffer overflow vulnerability. This issue exists in 'winhlp32.exe' and is exposed when a malformed phrase compressed Windows Help file .hlp ...

Microsoft Windows XP20002003 - winhlp32 Phrase Integer Overflow

Microsoft Windows XP20002003 - winhlp32 Phrase Integer Overflow source: https://www.securityfocus.com/bid/12091/info Microsoft Windows is prone to an integer overflow vulnerability. This issue exists in 'winhlp32.exe' and is exposed when a malformed phrase compressed Windows Help file .hlp is...

CVE-2002-0074: Undefined Security Weakness

Cross-site scripting vulnerability in Help File search facility for Internet Information Server IIS 4.0, 5.0 and 5.1 allows remote attackers to embed scripts into another user's session...

CVE-1999-0716

CVE-1999-0716 is a historical vulnerability described across multiple sources as a buffer overflow in Windows NT 4.0’s help file utility triggered by a malformed help file. The Red Hat advisory and CVE entries confirm the issue but do not provide concrete exploit details beyond the basic descript...

CVE-1999-0716

Buffer overflow in Windows NT 4.0 help file utility via a malformed help file...

CVE-1999-0716: Undefined Security Weakness

Buffer overflow in Windows NT 4.0 help file utility via a malformed help file...

ms.winhlp32.exe.bof.txt

The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. Microsoft Security Bulletin MS99-015 -------------------------------------- Patch Available for "Malformed Help File"...

CVE-1999-0716

Buffer overflow in Windows NT 4.0 help file utility via a malformed help file...