Buffer Overflow in HTML Help ActiveX Control Affects Microsoft Windows

CVE-2002-0693

Summary

The vulnerability in the HTML Help ActiveX Control (hhctrl.ocx) allows remote attackers to execute arbitrary code on affected Microsoft Windows systems. This occurs due to a buffer overflow that can be triggered by supplying excessively long parameters to the Alink function or by including lengthy arguments in the script for the showHelp function. Systems running Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, 2000, and XP are especially at risk. It is essential that users and administrators implement the necessary security patches as advised by Microsoft to prevent potential exploitation.

References