Microsoft Windows Help File Heap Buffer Overflow (CVE-2006-1591)

There exists a buffer overflow vulnerability in Microsoft Windows. The vulnerability is caused by the improper parsing of malformed .hlp file in the Windows Help system. An attacker may exploit this vulnerability by enticing a user to open a crafted Windows help file, which will enable the attack...

CVE-2006-1591

CVE-2006-1591 describes a heap-based buffer overflow in Microsoft Windows Help winhlp32.exe caused by improper parsing of malformed .hlp files. The vulnerability permits user-assisted attackers to execute arbitrary code by crafting an embedded image data payload within a Windows Help (.hlp) file....