NVD

Id
70654  
Name
CVE-2004-0201  
Description
Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-08-06  
Modified Date
2017-07-10  
Seq
2004-0201  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
364456 70654 CVE-2004-0201 20040714 HtmlHelp - .CHM File Heap Overflow  View
364457 70654 CVE-2004-0201 oval:org.mitre.oval:def:1503  View
364458 70654 CVE-2004-0201 oval:org.mitre.oval:def:1530  View
364459 70654 CVE-2004-0201 oval:org.mitre.oval:def:2155  View
364460 70654 CVE-2004-0201 oval:org.mitre.oval:def:3179  View
364461 70654 CVE-2004-0201 VU#920060  View
364462 70654 CVE-2004-0201 MS04-023  View
364463 70654 CVE-2004-0201 TA04-196A  View
364464 70654 CVE-2004-0201 win-htmlhelp-execute-code(16586)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62933 JVNDB-2004-000275 Microsoft Windows の HTML ヘルプ機能におけるヒープオーバーフローの脆弱性 Microsoft Windows の HTML ヘルプ機能 (hh.exe) には、ヘルプファイル (.chm) に含まれる Length パラメータに対するチェックが不適切であるため、ヒープオーバーフローが発生する脆弱性が存在します。 CVE-2004-0201 8628 CVE-2004-0201 70654 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000275.html 2004-07-13 2007-04-01 View