Microsoft Internet Explorer HHCtrl ActiveX控件堆溢出漏洞(MS06-046)

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer的HTML帮助ActiveX控件（hhctrl.ocx）在处理Image属性时存在漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 攻击者可以通过在恶意网页中多次将属性设置为超长字符串导致堆溢出，如果用户受骗访问了恶意的网页就会导致执行任意指令。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 Microsoft已经为此发布了一个安全公告（MS06-046）以及相应补丁...

msie-heap.txt

// MoBB Demonstration function Demo var a = new ActiveXObject"Internet.HHCtrl.1"; var b = unescape"XXXX"; while b.length Clicking the button below may crash your browser!...

[Full Disclosure] Using DHTML XSS to launch HHCTRL exploit

Full Disclosure Using DHTML XSS to launch HHCTRL exploit GeCAD NET Security Advisory 2005.02.16 Original notice requires authentication: http://www.gecadnet.ro/windows/?AID=1414 February 16th 2005 1. Past Events On January 20th 2005, GeCAD NET released a security advisory warning that the exploit...

IE HHCTRL exploit still usable even after patch

Hi everybody. Just wanted to point out that the patch Microsoft released to take care of the HHCTRL.OCX vulnerability MS05-001 is fixing just part of the problem. At least Windows XP Service Pack 1 and Windows 2000 Service Pack 4 are still vulnerable to exploiting the HHCTRL vulnerability, by usi...

VulnCheck KEV: CVE-2004-1043

Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help ActiveX Control hhctrl.ocx to open a Help popup window containing the PCHealth tools.htm file in the local zone and injecting Javascript to be executed, as...

Advisory CA-2000-12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CERT Advisory CA-2000-12 HHCtrl ActiveX Control Allows Local Files to be Executed Original release date: June 19, 2000 Last revised: -- Source: CERT/CC A complete revision history is at the end of this file. Systems Affected Systems running Microsoft...