CVEvulnerability
CVE-2002-0693
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-10-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via (1) a long parameter to the Alink function, or (2) script containing a long argument to the showHelp function.
Affected configurations
• microsoft windows 2000
• microsoft windows 2000 terminal services
• microsoft windows 98
• microsoft windows 98se
• microsoft windows me
• microsoft windows nt 4.0
• microsoft windows xp
References
- http://marc.info/?l=bugtraq&m=103365849505409&w=2 marc.info
- http://marc.info/?l=bugtraq&m=103419115517344&w=2 marc.info
- http://marc.info/?l=bugtraq&m=103435279404182&w=2 marc.info
- http://www.iss.net/security_center/static/10253.php Vendor Advisory
- http://www.securityfocus.com/bid/5874 www.securityfocus.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-055 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A374 oval.cisecurity.org
- http://marc.info/?l=bugtraq&m=103365849505409&w=2 marc.info
- http://marc.info/?l=bugtraq&m=103419115517344&w=2 marc.info
- http://marc.info/?l=bugtraq&m=103435279404182&w=2 marc.info
- http://www.iss.net/security_center/static/10253.php Vendor Advisory
- http://www.securityfocus.com/bid/5874 www.securityfocus.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-055 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A374 oval.cisecurity.org