Microsoft Windows Help File Heap Buffer Overflow (CVE-2006-1591)

There exists a buffer overflow vulnerability in Microsoft Windows. The vulnerability is caused by the improper parsing of malformed .hlp file in the Windows Help system. An attacker may exploit this vulnerability by enticing a user to open a crafted Windows help file, which will enable the attack...

Microsoft Help Workshop CNT Help Contents Buffer Overflow (CVE-2007-0352)

The Microsoft Help Workshop is a development tool to create Help HLP files for Windows based applications. Help Workshop uses project HPJ and content CNT files, along with other resource to compile the final help file that can be viewed using the Microsoft Windows Help program. A buffer overflow...

Microsoft Help and Support Center Remote Code Execution Vulnerability (2229593)

This host is missing a critical security update according to Microsoft Bulletin MS10-042. OpenVAS Vulnerability Test $Id: secpodms10-042.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Help and Support Center Remote Code Execution Vulnerability 2229593 Authors: Madhuri D Copyright: Copyright c 201...

Microsoft Help and Support Center Remote Code Execution Vulnerability (2229593)

This host is missing a critical security update according to Microsoft Bulletin MS10-042. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Help and Support Center code execution

Code injection via URL...

Microsoft Help Center XSS and Command Execution

Help and Support Center is the default application provided to access online documentation for Microsoft Windows. Microsoft supports accessing help documents directly via URLs by installing a protocol handler for the scheme "hcp". Due to an error in validation of input to hcp:// combined with a...

Pay Attention to MS10-042 Update

Microsoft has released four new security bulletins in the July 2010 edition of patch Tuesday. These bulletins address five vulnerabilities. It is not uncommon, and has become expected, for a light patch Tuesday to follow a heavy patch Tuesday release from Microsoft. Last month, Microsoft released...

MS Patch Tuesday: Googler Zero-Day Fixed in 33 Days

Last month, when Google researcher Tavis Ormandy released details on a critical Help and Support Center vulnerability that exposed Windows XP and Windows Server 2003 users to malicious hacker attacks, Microsoft was publicly unhappy with the decision. Ormandy claims he spent five days negotiating...

MS10-042: Vulnerability in Help and Support Center Could Allow Remote Code Execution (2229593)

The Windows Help and Support Center does not properly validate HCP URLs, which are associated normally with the Windows Help and Support Center. If an attacker can trick a user on the affected host into viewing a specially crafted web page or clicking on a specially crafted link in an email...

Real Player 12.0.0.879 0day for WinXP

No description provided by source. Exploit Title: Real Player 12.0.0.879 0day for WinXP Date: 09/07/2010 Author: webDEViL Version: 12.0.0.879 Tested on: WinXP This bug utilizes Microsoft Help vuln for RCE. You can test by browsing to http://krash.in/real-exp/exploit.ram...

Real Player 12.0.0.879 - Code Execution

Real Player 12.0.0.879 - Code Execution Exploit Title: Real Player 12.0.0.879 0day for WinXP Date: 09/07/2010 Author: webDEViL Version: 12.0.0.879 Tested on: WinXP This bug utilizes Microsoft Help vuln for RCE. You can test by browsing to http://krash.in/real-exp/exploit.ram...

Real Player 12.0.0.879 - Code Execution

Exploit Title: Real Player 12.0.0.879 0day for WinXP Date: 09/07/2010 Author: webDEViL Version: 12.0.0.879 Tested on: WinXP This bug utilizes Microsoft Help vuln for RCE. You can test by browsing to http://krash.in/real-exp/exploit.ram...

Wiki Web Help 'getpage.php' SQL Injection Vulnerability

Wiki Web Help is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...

Wiki Web Help 0.28 SQL Injection

Version: v0.28 Possible all versions Vendor: Richard Bondi - http://wikiwebhelp.org Download: http://wikiwebhelp.org/release/wwh-0.2.8.zip Description: "The goal of this project is to create a help application that is editable by the community. Standard wiki systems are great for many application...

Wiki Web Help Cross Site Scripting and HTML Injection Vulnerabilities

Wiki Web Help is prone to a cross-site scripting vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code could run in the context of the affected...

WikiWebHelp 0.28 - SQL Injection

Version: v0.28 Possible all versions Vendor: Richard Bondi - http://wikiwebhelp.org Download: http://wikiwebhelp.org/release/wwh-0.2.8.zip Description: "The goal of this project is to create a help application that is editable by the community. Standard wiki systems are great for many application...

Wiki Web Help 0.2.7 Cross Site Scripting

------------------------------------------------------------------------ Software................Wiki Web Help 0.2.7 Vulnerability...........Persistent/Reflected XSS Download................http://sourceforge.net/projects/wwh/ Release Date............7/1/2010 Tested On...............Windows Vista...

Wiki Web Help 0.2.7 Shell Upload

------------------------------------------------------------------------ Software................Wiki Web Help 0.2.7 Vulnerability...........Arbitrary Upload Download................http://sourceforge.net/projects/wwh/ Release Date............7/1/2010 Tested On...............Windows Vista + XAMPP...

Wiki Web Help 0.2.7 cross site scripting

No description provided by source. ------------------------------------------------------------------------ Software................Wiki Web Help 0.2.7 Vulnerability...........Persistent/Reflected XSS Download................http://sourceforge.net/projects/wwh/ Release Date............7/1/2010...

Huge Increase Seen in Attacks on Windows Help Center Flaw

Attackers are ramping up their attempts to exploit the recently disclosed vulnerability in the Windows Help and Support Center in Windows XP. There have been targeted attacks against the flaw for two weeks now, but experts have noticed a major increase in the volume and spread of them in recent...