CVE-2007-0214

Microsoft Windows 2000 SP3, XP SP2, 2003 SP1 - Remote Code Execution via HTML Help ActiveX Control

Title source: llm
STIX 2.1

Description

The HTML Help ActiveX control (Hhctrl.ocx) in Microsoft Windows 2000 SP3, XP SP2 and Professional, 2003 SP1 allows remote attackers to execute arbitrary code via unspecified functions, related to uninitialized parameters.

References (9)

Core 9
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/22478
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1017635
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA07-044A.html
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/563756
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A125
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24136
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/31884
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/0577

Scores

EPSS 0.2637
EPSS Percentile 97.8%

Details

Status published
Products (6)
microsoft/windows_2000
microsoft/windows_2003_server
microsoft/windows_2003_server 64-bit
microsoft/windows_2003_server itanium
microsoft/windows_2003_server sp1 (2 CPE variants)
microsoft/windows_xp (2 CPE variants)
Published Feb 13, 2007
Tracked Since Feb 18, 2026