[Full-Disclosure] Remote code execution with parameters without user interaction, even with XP SP2

PoC called CMDExe: http://www.freewebs.com/shreddersub7/htm.htm Discussion: http://www.freewebs.com/shreddersub7/expl-discuss.htm ------------------Which systems are vulnerable?-------- Any system running any Microsoft Windows XP edition with Internet Explorer 6 or higher, even with SP2 applied...

Microsoft Windows XP20002003 - winhlp32 Phrase Heap Overflow

Microsoft Windows XP20002003 - winhlp32 Phrase Heap Overflow source: https://www.securityfocus.com/bid/12092/info Microsoft Windows is prone to a heap-based buffer overflow vulnerability. This issue exists in 'winhlp32.exe' and is exposed when a malformed phrase compressed Windows Help file .hlp ...

Microsoft Windows XP20002003 - winhlp32 Phrase Integer Overflow

Microsoft Windows XP20002003 - winhlp32 Phrase Integer Overflow source: https://www.securityfocus.com/bid/12091/info Microsoft Windows is prone to an integer overflow vulnerability. This issue exists in 'winhlp32.exe' and is exposed when a malformed phrase compressed Windows Help file .hlp is...

CVE-1999-0716

Buffer overflow in Windows NT 4.0 help file utility via a malformed help file...

CVE-1999-0716

CVE-1999-0716 is a historical vulnerability described across multiple sources as a buffer overflow in Windows NT 4.0’s help file utility triggered by a malformed help file. The Red Hat advisory and CVE entries confirm the issue but do not provide concrete exploit details beyond the basic descript...

ms.winhlp32.exe.bof.txt

The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. Microsoft Security Bulletin MS99-015 -------------------------------------- Patch Available for "Malformed Help File"...

CVE-1999-0716

Buffer overflow in Windows NT 4.0 help file utility via a malformed help file...