Description Heap-based buffer overflow in Microsoft Windows Help winhlp32.exe allows user-assisted attackers to execute arbitrary code via crafted embedded image data in a .hlp file.
Metrics CVSS Version 4.0 CVSS Version 3.x CVSS Version 2.0 SSVC
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No CVSS 3.x data is available for this CVE.
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration Affected Products Product Versions microsoft windows 2000 All versions
CPE cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:* Remediation No remediation found in references. microsoft windows 2003 server enterprise
enterprise sp1
r2
r2 sp1
standard
Viewing 5 of 8 versions. View all CPE cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:r2:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:* Remediation No remediation found in references. microsoft windows nt 4.0
4.0 sp1
4.0 sp2
4.0 sp3
4.0 sp4
Viewing 5 of 8 versions. View all CPE cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:terminal_server:*:*:*:*:* cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:* Remediation No remediation found in references. microsoft windows xp All versions
CPE cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:* Remediation No remediation found in references.
Change History 26 change records found show changes
Date Action Recorded By Jun 16, 2026 CVE Modified [email protected] Apr 16, 2026 [email protected] Nov 21, 2024 CVE Modified CVE May 14, 2024 CVE Modified [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Oct 18, 2018 CVE Modified [email protected] Jul 20, 2017 CVE Modified [email protected] Apr 3, 2006 Initial Analysis [email protected]