Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2002-0693 | First vendor Publication | 2002-10-10 |
| Vendor | Cve | Last vendor Modification | 2024-11-20 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 7.5 | Attack Range | Network |
| Cvss Impact Score | 6.4 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via (1) a long parameter to the Alink function, or (2) script containing a long argument to the showHelp function. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0693 |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:374 | |||
| Oval ID: | oval:org.mitre.oval:def:374 | ||
| Title: | HTML Help ActiveX Control Buffer Overflow | ||
| Description: | Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via (1) a long parameter to the Alink function, or (2) script containing a long argument to the showHelp function. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2002-0693 | Version: | 6 |
| Platform(s): | Microsoft Windows 2000 | Product(s): | HTML Help ActiveX Control |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2005-11-03 | Name : Unchecked Buffer in Windows Help(Q323255) File : nvt/smb_nt_ms02-055.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 2992 | Microsoft IE HTML Help ActiveX Control alink and showHelp Overflow Microsoft Windows HTML Help ActiveX Control contains a flaw that allows remote attackers to execute arbitrary code. The flaw occurs due to an unchecked buffer in the hhctrl.ocx file. This can be exploited by using a long parameter to the "Alink" function or a script containing a long argument to the "showHelp" function. |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2014-01-10 | HTML Help ActiveX Object Access RuleID : 4149 - Revision : 5 - Type : WEB-CLIENT |
| 2014-01-10 | Microsoft Windows HTML Help hhctrl.ocx clsid access attempt RuleID : 3148-community - Revision : 21 - Type : OS-WINDOWS |
| 2014-01-10 | Microsoft Windows HTML Help hhctrl.ocx clsid access attempt RuleID : 3148 - Revision : 21 - Type : OS-WINDOWS |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2002-10-24 | Name : Arbitrary code can be executed on the remote host through the web client. File : smb_nt_ms02-055.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:23:46 |
|
| 2024-11-28 12:05:05 |
|
| 2024-08-02 12:02:13 |
|
| 2024-08-02 01:01:20 |
|
| 2024-02-02 01:02:00 |
|
| 2024-02-01 12:01:21 |
|
| 2023-09-05 12:01:55 |
|
| 2023-09-05 01:01:12 |
|
| 2023-09-02 12:01:56 |
|
| 2023-09-02 01:01:13 |
|
| 2023-08-12 12:02:18 |
|
| 2023-08-12 01:01:13 |
|
| 2023-08-11 12:02:00 |
|
| 2023-08-11 01:01:14 |
|
| 2023-08-06 12:01:51 |
|
| 2023-08-06 01:01:14 |
|
| 2023-08-04 12:01:55 |
|
| 2023-08-04 01:01:13 |
|
| 2023-07-14 12:01:53 |
|
| 2023-07-14 01:01:14 |
|
| 2023-03-29 01:01:52 |
|
| 2023-03-28 12:01:19 |
|
| 2022-10-11 12:01:41 |
|
| 2022-10-11 01:01:06 |
|
| 2021-05-04 12:01:42 |
|
| 2021-04-22 01:01:50 |
|
| 2020-05-23 00:15:00 |
|
| 2019-05-09 12:01:12 |
|
| 2019-04-30 21:19:17 |
|
| 2018-10-13 00:22:25 |
|
| 2017-10-11 09:23:15 |
|
| 2016-10-18 12:01:02 |
|
| 2016-08-31 12:00:41 |
|
| 2016-06-28 14:59:11 |
|
| 2016-04-26 12:11:35 |
|
| 2014-02-17 10:24:47 |
|
| 2014-01-19 21:21:43 |
|
| 2013-05-11 12:10:12 |
|
