Vulnerabilities > CVE-2004-1306 - Unspecified vulnerability in Microsoft products

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
microsoft
exploit available
NVD
Published: 2004-12-31
Updated: 2019-04-30

Summary

Heap-based buffer overflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via a crafted .hlp file.

Vulnerable Configurations

Part Description Count
OS
Microsoft
58

Exploit-Db

descriptionMicrosoft Windows 2000/2003/XP winhlp32 Phrase Integer Overflow Vulnerability. CVE-2004-1306 . Remote exploit for windows platform
idEDB-ID:25049
last seen2016-02-03
modified2004-12-23
published2004-12-23
reporterflashsky fangxing
sourcehttps://www.exploit-db.com/download/25049/
titleMicrosoft Windows 2000/2003/XP winhlp32 Phrase Integer Overflow Vulnerability

References