CVE

Id
5084  
CVE No.
CVE-2002-0694  
Status
Entry  
Description
The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP uses the Local Computer Security Zone when opening .chm files from the Temporary Internet Files folder, which allows remote attackers to execute arbitrary code via HTML mail that references or inserts a malicious .chm file containing shortcuts that can be executed, aka "Code Execution via Compiled HTML Help File."  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
26729 5084 CVE-2002-0694 MS:MS02-055  View
26730 5084 CVE-2002-0694 URL:http://www.microsoft.com/technet/security/bulletin/ms02-055.asp  View
26731 5084 CVE-2002-0694 XF:win-chm-code-execution(10254)  View
26732 5084 CVE-2002-0694 URL:http://www.iss.net/security_center/static/10254.php  View
26733 5084 CVE-2002-0694 OVAL:oval:org.mitre.oval:def:403  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63914 JVNDB-2002-000241 Microsoft Windows の HTML ヘルプにおける任意のコードを実行される脆弱性 Microsoft Windows において、HTML ファイル (.chm) にはセキュリティゾーンの設定が適用されないために、任意のコードを実行される脆弱性が存在します。 CVE-2002-0694 5084 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000241.html  View