Description
Heap-based buffer overflow in Microsoft Windows Help winhlp32.exe allows user-assisted attackers to execute arbitrary code via crafted embedded image data in a .hlp file.
References (6)
Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/25573
Exploit, Vendor Advisory x_refsource_misc
http://www.open-security.org/advisories/15
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/430871/100/0/threaded
Third Party Advisory third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/700
Exploit mailing-list
x_refsource_fulldisc
http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044748.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/17325
Scores
EPSS
0.0704
EPSS Percentile
93.6%
Details
Status
published
Products (7)
microsoft/windows_2000
(5 CPE variants)
microsoft/windows_2003_server
enterprise (2 CPE variants)
microsoft/windows_2003_server
r2 (2 CPE variants)
microsoft/windows_2003_server
standard (2 CPE variants)
microsoft/windows_2003_server
web (2 CPE variants)
microsoft/windows_nt
4.0 (31 CPE variants)
microsoft/windows_xp
(6 CPE variants)
Published
Apr 03, 2006
Tracked Since
Feb 18, 2026