Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp fi…

Exploit prediction (EPSS)

67.05% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

• Metasploit exploit/windows/fileformat/hhw_hhp_indexfile_bof HTML Help Workshop 4.74 (hhp Project File) Buffer Overflow · metasploit exploit, good rank · 2009-01-17
• EDB-7727 Microsoft HTML Workshop 4.74 - Universal Buffer Overflow · local · 2009-01-12
• EDB-16631 Microsoft HTML Help Workshop 4.74 - '.hhp' Index Buffer Overflow (Metasploit) (3) · local · 2010-09-25
• EDB-1495 Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (3) · local · 2006-02-14
• EDB-1490 Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (2) · local · 2006-02-11
• EDB-1488 Microsoft HTML Help Workshop - '.hhp' Denial of Service · dos · 2006-02-10
• EDB-1470 Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (1) · local · 2006-02-06
• EDB-10321 Microsoft HTML Help Workshop 4.74 - '.hhp' Local Buffer Overflow (1) · local · 2009-12-05

CVSS scores

Classification

Weakness

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

• exploit-db.com /exploits/7727 · exploit, x_refsource_EXPLOIT-DB, x_transferred
• securityreason.com /securityalert/4914 · third-party-advisory, x_refsource_SREASON, x_transferred

Sources

• CVE List: CVE-2009-0133
• NVD: CVE-2009-0133

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.