CVE-2004-0201
Critical
Description
Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041.
SeverityCritical
CVSS10.0
Exploit probability99. percentile45.3%
Product
Microsoft Windows
PublishedAug 6, 2004
First seenAug 6, 2004
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microsoft windows_2000 | No range specified | — |
| avaya ip600_media_servers | No range specified | — |
| avaya definity_one_media_server | No range specified | — |
| avaya s8100 | No range specified | — |
| avaya modular_messaging_message_storage_server | s3400 | — |
| microsoft windows_2003_server | enterprise, enterprise_64-bit, r2, standard, web | — |
| microsoft windows_98 | No range specified | — |
| microsoft windows_98se | No range specified | — |
| microsoft windows_me | No range specified | — |
| microsoft windows_nt | 4.0 | — |
| microsoft windows_xp | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.