CVE-2006-4138: Undefined Security Weakness

Multiple unspecified vulnerabilities in Microsoft Windows Help File viewer winhlp32.exe allow user-assisted attackers to execute arbitrary code via crafted HLP files...

[Full-Disclosure] Remote code execution with parameters without user interaction, even with XP SP2

PoC called CMDExe: http://www.freewebs.com/shreddersub7/htm.htm Discussion: http://www.freewebs.com/shreddersub7/expl-discuss.htm ------------------Which systems are vulnerable?-------- Any system running any Microsoft Windows XP edition with Internet Explorer 6 or higher, even with SP2 applied...