CVE-2006-1591: Buffer Overflow
Published Apr 3, 2006
·Updated
Heap-based buffer overflow in Microsoft Windows Help winhlp32.exe allows user-assisted attackers to execute arbitrary code via crafted embedded image data in a .hlp file.
Affected Software
52 affected components
Microsoft Windows NT=4.0-sp5
Microsoft Windows XP=sp1
Microsoft Windows 2003 Server=web
Microsoft Windows 2003 Server=enterprise
Microsoft Windows NT=4.0-sp6a
Microsoft Windows NT=4.0-sp6a
Microsoft Windows XP=gold
Microsoft Windows 2000
Microsoft Windows NT=4.0-sp6
Microsoft Windows NT=4.0
Microsoft Windows NT=4.0-sp5
Microsoft Windows NT=4.0-sp1
Microsoft Windows NT=4.0-sp3
Microsoft Windows NT=4.0-sp3
Microsoft Windows NT=4.0-sp4
Microsoft Windows 2000=sp4
Microsoft Windows XP=sp2
Microsoft Windows XP
Microsoft Windows NT=4.0-sp6
Microsoft Windows NT=4.0-sp4
Microsoft Windows XP=sp1
Microsoft Windows 2000=sp2
Microsoft Windows 2003 Server=r2-sp1
Microsoft Windows NT=4.0-sp4
Microsoft Windows NT=4.0-sp2
Microsoft Windows NT=4.0-sp6a
Microsoft Windows NT=4.0-sp1
Microsoft Windows NT=4.0
Microsoft Windows NT=4.0-sp6a
Microsoft Windows NT=4.0-sp2
Microsoft Windows 2003 Server=web-sp1
Microsoft Windows NT=4.0-sp1
Microsoft Windows 2000=sp1
Microsoft Windows NT=4.0-sp4
Microsoft Windows NT=4.0-sp6
Microsoft Windows XP=sp2
Microsoft Windows XP
Microsoft Windows NT=4.0-sp6
Microsoft Windows NT=4.0-sp3
Microsoft Windows 2003 Server=standard-sp1
Microsoft Windows NT=4.0-sp2
Microsoft Windows 2003 Server=enterprise-sp1
Microsoft Windows NT=4.0-sp5
Microsoft Windows NT=4.0-sp1
Microsoft Windows 2003 Server=standard
Microsoft Windows XP=sp2
Microsoft Windows NT=4.0
Microsoft Windows NT=4.0-sp3
Microsoft Windows 2003 Server=r2
Microsoft Windows NT=4.0-sp5
Microsoft Windows NT=4.0-sp2
Microsoft Windows 2000=sp3
Event History
Apr 3, 2006
CVE Published
10:04 AM
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-1591?
CVE-2006-1591 has a critical severity rating due to the potential for remote code execution.
2
How do I fix CVE-2006-1591?
To fix CVE-2006-1591, ensure that you have applied the latest security updates from Microsoft for your affected Windows version.
3
What versions of Windows are affected by CVE-2006-1591?
CVE-2006-1591 affects multiple versions, including Windows NT 4.0, Windows XP, and Windows Server 2003.
4
What is the impact of CVE-2006-1591?
The impact of CVE-2006-1591 allows attackers to execute arbitrary code on the vulnerable system via specially crafted .hlp files.
5
Can CVE-2006-1591 be exploited remotely?
Yes, CVE-2006-1591 can be exploited remotely if a user opens a malicious .hlp file.