Microsoft Help Workshop HPJ OPTIONS Section Buffer Overflow (CVE-2007-0427)

The Microsoft Help Workshop product is a development tool that allows the design and development of help files frequently packaged with Windows based applications. The program is used to author help content and package it in Microsoft Help files such as HLP. There exists a buffer overflow...

CVE-2007-0427

The CVE-2007-0427 case concerns Microsoft Help Workshop 4.03.0002, where a stack-based buffer overflow occurs in the HPJ OPTIONS section. A long HLP field in an HPJ file can lead to user-assisted remote code execution, with impact described as arbitrary code run in the context of the current user...