MS07-008: Vulnerability in HTML Help ActiveX Control Could Allow Remote Code Execution (928843)

The remote host contains a version of the HTML Help ActiveX control that is vulnerable to a security flaw that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit this web page. Tenable Network Security, Inc...

Microsoft Windows HTML Help ActiveX code execution

It's possible to access unsafe functions from web page. Vulnerability can be used for hidden malware installation...

Microsoft HTML Help ActiveX control fails to properly validate input

Overview The Microsoft HTML Help ActiveX control fails to properly validate input, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The HTML Help Control HHCtrl Object is a Windows ActiveX control that provides the ability to view...

CVE-2006-5295

Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service scanning service crash via a crafted Compressed HTML Help CHM file that causes ClamAV to "read an invalid memory location."...

Internet Explorer HTML Help ActiveX buffer overflow

Buffer overflow on oversized 'Image' property. Vulnerability can be used for hidden trojan installation...

Microsoft Security Bulletin MS06-046 Vulnerability in HTML Help Could Allow Remote Code Execution (922616)

Microsoft Security Bulletin MS06-046 Vulnerability in HTML Help Could Allow Remote Code Execution 922616 Published: August 8, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Critic...

MS06-046: Vulnerability in HTML Help Could Allow Remote Code Execution (922616)

The remote host contains a version of the HTML Help ActiveX control that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit this web page. C Tenable Network Security, Inc. include"compat.inc"; if description...

Microsoft Internet Explorer vulnerable to heap overflow via the HTML Help Control "Image" property

Overview The HTML Help ActiveX control contains a heap overflow vulnerability. This may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description ActiveXActiveX is a technology that allows programmers to create reusable software components that can be...

CVE-2006-3357

Heap-based buffer overflow in HTML Help ActiveX control hhctrl.ocx in Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code by repeatedly setting the Image field of an Internet.HHCtrl.1 object to certain values,...

CVE-2006-3357

Heap-based buffer overflow in HTML Help ActiveX control hhctrl.ocx in Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code by repeatedly setting the Image field of an Internet.HHCtrl.1 object to certain values,...

CVE-2006-3357

CVE-2006-3357 describes a heap overflow in the HTML Help ActiveX control (hhctrl.ocx) used by Internet Explorer 6. The vulnerability occurs when repeatedly setting the Image property of Internet.HHCtrl.1, which can lead to remote code execution or an application crash. Public advisories attribute...

MoBB #2: Internet.HHCtrl Image Property

The following bug was tested on the latest version of Internet Explorer 6 on a fully-patched Windows XP SP2 system. This bug is interesting because a small heap overflow occurs each time this property is set. The bug is difficult to detect unless heap verification has been enabled in the global...

Microsoft HTML Help Workshop buffer overflow

Buffer overflow on .hhp files parsing...

Eagle Werros

/ Unl0ck Research Team Security Advisory / product: HTML Help Workshop 1994-1999 bug : stack overflow / vendor : Microsoft Corp. http://microsoft.com date : 13.02.06 / author : darkeagle / Info: stack based buffer overflows were founded in HTML HW. / HTML HW crashes when user opens specially...

Microsoft HTML Help Workshop (.hhp file) Buffer Overflow Exploit (3)

Exploit for unknown platform in category local exploits ==================================================================== Microsoft HTML Help Workshop .hhp file Buffer Overflow Exploit 3 ==================================================================== / \ Windows HTML Help Workshop Index...

Microsoft HTML Help Workshop buffer overflow

Overview A buffer overflow in Microsoft HTML Help Workshop may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Microsoft HTML Help provides a standard help system for the Windows operating system. HTML Help Workshop is a component of the software development...

Microsoft HTML Help Workshop (.hhp file) Buffer Overflow Exploit (new)

No description provided by source. / Microsoft HTML Help Workshop .hhp file Compiled File Header Buffer Overflow Exploit The Buffer Overlfow in Compiled File in Options in a HHP file. Bug found by:darkeagle Exploit coded by:k3xji Mail:[email protected] Web: www.guvenliklab.com Tested:Win XP SP2 /...

Microsoft HTML Help Workshop (.hhp file) Buffer Overflow Exploit (new)

Exploit for unknown platform in category local exploits ====================================================================== Microsoft HTML Help Workshop .hhp file Buffer Overflow Exploit new ====================================================================== / Microsoft HTML Help Workshop...

Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (2)

/ Microsoft HTML Help Workshop .hhp file Compiled File Header Buffer Overflow Exploit The Buffer Overlfow in Compiled File in Options in a HHP file. Bug found by:darkeagle Exploit coded by:k3xji Mail:[email protected] Web: www.guvenliklab.com Tested:Win XP SP2 / include include include define BUFL...

Microsoft HTML Help Workshop (.hhp file) Buffer Overflow Exploit (new)

Exploit for unknown platform in category dos / poc ====================================================================== Microsoft HTML Help Workshop .hhp file Buffer Overflow Exploit new ====================================================================== OPTIONS Compatibility=1.1 or later...