Microsoft HTML Help Workshop HHC.EXE HHA.DLL HHC Path Memory Corruption Vulnerability
BID:13668
Info
Microsoft HTML Help Workshop HHC.EXE HHA.DLL HHC Path Memory Corruption Vulnerability
| Bugtraq ID: | 13668 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 17 2005 12:00AM |
| Updated: | May 17 2005 12:00AM |
| Credit: | Discovery of this issue is credited to Chad Myers <[email protected]>. |
| Vulnerable: |
Microsoft HTML Help Workshop 4.74.8702 |
| Not Vulnerable: | |
Discussion
Microsoft HTML Help Workshop HHC.EXE HHA.DLL HHC Path Memory Corruption Vulnerability
The Microsoft HTML Help Workshop compiler tool, 'hhc.exe', is prone to a memory corruption vulnerability.
Immediate consequences of exploitation of this issue result in an application crash; this would not be considered a vulnerability. However, it may be possible to subtly manipulate the contents of the affected registers so that an exploitable code path is reached. This has not been confirmed.
This BID will be updated or retired when further investigation of this issue is completed.
The Microsoft HTML Help Workshop compiler tool, 'hhc.exe', is prone to a memory corruption vulnerability.
Immediate consequences of exploitation of this issue result in an application crash; this would not be considered a vulnerability. However, it may be possible to subtly manipulate the contents of the affected registers so that an exploitable code path is reached. This has not been confirmed.
This BID will be updated or retired when further investigation of this issue is completed.
Exploit / POC
Microsoft HTML Help Workshop HHC.EXE HHA.DLL HHC Path Memory Corruption Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Microsoft HTML Help Workshop HHC.EXE HHA.DLL HHC Path Memory Corruption Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Microsoft HTML Help Workshop HHC.EXE HHA.DLL HHC Path Memory Corruption Vulnerability
References:
References:
- Technet Security (Microsoft)