Description Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041.
Metrics CVSS Version 4.0 CVSS Version 3.x CVSS Version 2.0 SSVC
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No CVSS 3.x data is available for this CVE.
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration Affected Products Product Versions avaya ip600 media servers All versions
CPE cpe:2.3:a:avaya:ip600_media_servers:*:*:*:*:*:*:*:* Remediation No remediation found in references. avaya definity one media server All versions
CPE cpe:2.3:h:avaya:definity_one_media_server:*:*:*:*:*:*:*:* Remediation No remediation found in references. avaya s8100 All versions
CPE cpe:2.3:h:avaya:s8100:*:*:*:*:*:*:*:* Remediation No remediation found in references. avaya modular messaging message storage server s3400
CPE cpe:2.3:o:avaya:modular_messaging_message_storage_server:s3400:*:*:*:*:*:*:* Remediation No remediation found in references. microsoft windows 2000 All versions
CPE cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:* Remediation No remediation found in references. microsoft windows 2003 server enterprise
enterprise_64-bit
r2
standard
web
CPE cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:* Remediation No remediation found in references. microsoft windows 98 All versions
CPE cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:* Remediation No remediation found in references. microsoft windows 98se All versions
CPE cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:* Remediation No remediation found in references. microsoft windows me All versions
CPE cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:* Remediation No remediation found in references. microsoft windows nt 4.0
4.0 sp1
4.0 sp2
4.0 sp3
4.0 sp4
Viewing 5 of 8 versions. View all CPE cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:* Remediation No remediation found in references. microsoft windows xp All versions
CPE cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:* Remediation No remediation found in references.
Change History 28 change records found show changes
Date Action Recorded By Jun 16, 2026 CVE Modified [email protected] Apr 16, 2026 [email protected] Nov 20, 2024 CVE Modified CVE May 14, 2024 CVE Modified [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Oct 12, 2018 CVE Modified [email protected] Oct 11, 2017 CVE Modified [email protected] Jul 11, 2017 CVE Modified [email protected] Jan 1, 2004 Initial Analysis [email protected]