Heap-based Buffer Overflow Vulnerability in Microsoft HtmlHelp
CVE-2004-0201
Currently unrated
Key Information:
- Vendor
Avaya
- Vendor
- CVE Published:
- 6 August 2004
What is CVE-2004-0201?
A heap-based buffer overflow exists in the HtmlHelp program (hh.exe) in Microsoft's HTML Help service, which affects several older versions of Windows. This vulnerability permits remote attackers to execute arbitrary commands by crafting malicious .CHM files with unusually long length fields. The flaw is distinct from previous vulnerabilities and highlights the importance of maintaining updated software and cautious file handling practices.