CVE-2004-0201: Buffer Overflow
Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0201?
CVE-2004-0201 is rated as high severity due to its potential to allow remote attackers to execute arbitrary commands.
How do I fix CVE-2004-0201?
To fix CVE-2004-0201, users should apply security patches provided by Microsoft for the affected operating systems.
What systems are affected by CVE-2004-0201?
CVE-2004-0201 affects Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003.
What type of vulnerability is CVE-2004-0201?
CVE-2004-0201 is classified as a heap-based buffer overflow vulnerability.
Can CVE-2004-0201 be exploited through a CHM file?
Yes, CVE-2004-0201 can be exploited by using a .CHM file with a large length field.