CVE-2004-1361: Buffer Overflow
Integer underflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via a malformed .hlp file, which leads to a heap-based buffer overflow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1361?
CVE-2004-1361 is classified as a critical vulnerability that allows arbitrary code execution.
How do I fix CVE-2004-1361?
To fix CVE-2004-1361, you should apply the latest security patches provided by Microsoft for the affected Windows versions.
What systems are affected by CVE-2004-1361?
CVE-2004-1361 affects Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003.
What can attackers do by exploiting CVE-2004-1361?
Attackers can execute arbitrary code on vulnerable systems by using a specially crafted .hlp file.
Is there a workaround for CVE-2004-1361 if patches cannot be applied?
A possible workaround for CVE-2004-1361 is to block the use of .hlp files or limit access to untrusted sources.