Heap-based Buffer Overflow Vulnerability in Microsoft HtmlHelp

CVE-2004-0201

Summary

A heap-based buffer overflow exists in the HtmlHelp program (hh.exe) in Microsoft's HTML Help service, which affects several older versions of Windows. This vulnerability permits remote attackers to execute arbitrary commands by crafting malicious .CHM files with unusually long length fields. The flaw is distinct from previous vulnerabilities and highlights the importance of maintaining updated software and cautious file handling practices.

References