oval:org.mitre.oval:def:374

Definition Id: oval:org.mitre.oval:def:374

Oval ID:	oval:org.mitre.oval:def:374
Title:	HTML Help ActiveX Control Buffer Overflow
Description:	Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via (1) a long parameter to the Alink function, or (2) script containing a long argument to the showHelp function.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2002-0693	Version:	6
Platform(s):	Microsoft Windows 2000	Product(s):	HTML Help ActiveX Control
Definition Synopsis:
Software section Windows 2000 is installed AND the version of hhctrl.ocx is less than 5.2.3669.0 AND the version of hhsetup.dll is less than 5.2.3644.0 AND the version of itircl.dll is less than 5.2.3644.0 AND the version of itss.dll is less than 5.2.3644.0 AND NOT the patch q323255 is installed (Hotfix key) AND NOT Windows 2000 Service Pack 4 (or later) is installed Windows 2000 is installed AND Win2K/XP/2003 service pack 4 (or later) is installed AND Configuration section active scripting is enabled current user settings are being used and active scripting is enabled NOT use machine settings rather than individual user settings AND active scripting is enabled for the current user OR local machine settings are being used and active scripting is enabled use machine settings rather than individual user settings AND active scripting is enabled for the local machine

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0244s

Facebook rss twitter linkedin mail