CVE-2004-1361

Integer underflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute…

published January 19, 2005

CVSS

—

EPSS

20%

Percentile

97.4

In the wild

Unconfirmed

What it is

Integer underflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via a malformed .hlp file, which leads to a heap-based buffer overflow.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.20013 · 97.4th percentile
Published: 2005-01-19T05:00Z

EPSS history

Timeline

19 JAN 05:00Z
Integer underflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute…
cvelistv5