MS02-055: Unchecked Buffer in Windows Help Facility Could Enable Code Execution (323255)

The remote host contains a version of the HTML Helpfacility ActiveX control module that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and enticing a victim to visit it. C Tenable Network Security, Inc. include"compat.inc"; if description...

Security Bulletin MS02-060: Flaw in Windows XP Help and Support Center Could Enable File Deletion (Q328940)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Flaw in Windows XP Help and Support Center Could Enable File Deletion Q328940 Date: 16 October 2002 Software: Microsoft Windows XP Impact: Delete files on the user's system Max Risk:...

File deletion via Windows XP Help Center

By usgin hcp:// URL it's possible to remove file sustem objects...

CVE-2002-0693

Buffer overflow in the HTML Help ActiveX Control hhctrl.ocx in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via 1 a long parameter to the Alink function, or 2 script...

CVE-2002-0694

The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP uses the Local Computer Security Zone when opening .chm files from the Temporary Internet Files folder, which allows remote attackers to...

Thor Larholm security advisory TL#004

Thor Larholm security advisory TL004 Topic: Windows Help buffer overflow HTML version: http://www.pivx.com/larholm/adv/TL004/ Discovery date: 31 July 2002 Release date: 4 October 2002 Affected applications Microsoft Windows 98 Microsoft Windows 98 Second Edition Microsoft Windows Millennium Editi...

Microsoft Windows XP2000NT 4.0 - Help Facility ActiveX Control Buffer Overflow

Microsoft Windows XP2000NT 4.0 - Help Facility ActiveX Control Buffer Overflow // source: https://www.securityfocus.com/bid/5874/info The ActiveX control that provides much of the functionality for the Windows Help Center contains an unchecked buffer. Successful exploitation could result in...

Thor Larholm security advisory TL#004

Thor Larholm security advisory TL004 Topic: Windows Help buffer overflow Discovery date: 31 July 2002 Affected applications Microsoft Windows 98 Microsoft Windows 98 Second Edition Microsoft Windows Millennium Edition Microsoft Windows NT 4.0 Microsoft Windows NT 4.0, Terminal Server Edition...

Microsoft Windows XP/2000/NT 4.0 - Help Facility ActiveX Control Buffer Overflow

// source: https://www.securityfocus.com/bid/5874/info The ActiveX control that provides much of the functionality for the Windows Help Center contains an unchecked buffer. Successful exploitation could result in execution of arbitrary code in the security context of the current user. / By...

CVE-2002-0693

The CVE-2002-0693 issue affects multiple Windows platforms (Windows 98, 98 SE, Millennium, NT 4.0 and Terminal Server, Windows 2000, Windows XP) through the HTML Help ActiveX control (hhctrl.ocx). The root cause is an unchecked/buffer overflow in the HTML Help facility ActiveX module that could b...

CVE-2002-0693

Buffer overflow in the HTML Help ActiveX Control hhctrl.ocx in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via 1 a long parameter to the Alink function, or 2 script...

CVE-2002-0693: Undefined Security Weakness

Buffer overflow in the HTML Help ActiveX Control hhctrl.ocx in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via 1 a long parameter to the Alink function, or 2 script...

Security Bulletin MS02-055: Unchecked Buffer in Windows Help Facility Could Enable Code Execution (Q323255)

---------------------------------------------------------------------- Title: Unchecked Buffer in Windows Help Facility Could Enable Code Execution Q323255 Date: 02 October 2002 Software: Microsoft Windows 98 Microsoft Windows 98 Second Edition Microsoft Windows Millennium Edition Microsoft...

Buffer Overflow in IE/Outlook HTML Help

NGSSoftware Insight Security Research Advisory Name: Windows Help System Buffer Overflow Systems: Windows XP,2000,NT,ME and 98 Severity: High Risk Category: Buffer Overflow Vulnerability Vendor URL: http://www.microsoft.com/ Author: David Litchfield [email protected] Advisory URL:...

Delete arbitrary files using Help and Support Center [MSRC 1198dg]

MS Tracking ID: MSRC 1198dg Date Reported: 25/06/02 Date Published: 15/08/02 Vendor: Microsoft Impact: Delete files through CSS condition in Help Center Resolution: To be fixed in XP SP1 Tested Applications: IE6 + all service packs to date of publishing Windows XP + all patches to date of...

Winhelp32 Remote Buffer Overrun

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NGSSoftware Insight Security Research Advisory Name: Winhlp32.exe Remote BufferOverrun Systems Affected: Win2K Platform Severity: Critical Category: Remote Buffer Overrun Vendor URL: http://www.mircosoft.com Author: Mark Litchfield [email protected]...

Microsoft Windows 95982000NT 4.0 - WinHlp Item Buffer Overflow

Microsoft Windows 95982000NT 4.0 - WinHlp Item Buffer Overflow source: https://www.securityfocus.com/bid/4857/info HTML Help ActiveX control Hhctrl.ocx ships as part of Microsoft HTML Help and is designed to work with Internet Explorer to provide functionality for help systems. A remotely...

Microsoft Windows 95/98/2000/NT 4.0 - WinHlp Item Buffer Overflow

source: https://www.securityfocus.com/bid/4857/info HTML Help ActiveX control Hhctrl.ocx ships as part of Microsoft HTML Help and is designed to work with Internet Explorer to provide functionality for help systems. A remotely exploitable issue has been reported in the WinHlp facility. The softwa...

Buffer overflow in CDE dtprintinfo

Buffer overflow in HELP subsistem...

Microsoft Internet Information Server (IIS) contains cross-site scripting vulnerability in IIS Help Files search facility

Overview Visitors to web sites that use Microsoft IIS 5.0 and 5.1 are vulnerable to cross-site scripting attacks through the IIS help facility. Description Cross-site scripting is a form of attack in which an intruder leverages the trust between a victim and a web-site the victim trusts. Quoting...