Microsoft Windows Help and Support Center Buffer Overflow Vulnerability

Bugtraq ID:	6966
Class:	Boundary Condition Error
CVE:	CVE-2003-0009
Remote:	Yes
Local:	No
Published:	Feb 26 2003 12:00AM
Updated:	Jul 11 2009 08:06PM
Credit:	Discovery of this vulnerability credited to Warning and Fozzy.
Vulnerable:	Microsoft Windows XP Professional Microsoft Windows XP Home Microsoft Windows XP 64-bit Edition Microsoft Windows ME
Not Vulnerable:	Microsoft Windows XP Professional SP1 Microsoft Windows XP Home SP1 Microsoft Windows XP 64-bit Edition SP1

Microsoft Windows Help and Support Center Buffer Overflow Vulnerability

An exploit exists for this vulnerability.

• /data/vulnerabilities/exploits/s0h_Win32hlp.c

Microsoft Windows Help and Support Center Buffer Overflow Vulnerability

Solution:
Users are advised to obtain patches via Windows Update.

This issue was reportedly repaired for Windows XP as part of the fix provided in MS02-060 (also included in Windows XP Service Pack 1).


Microsoft Windows XP Home

• Microsoft Q328940
  http://www.microsoft.com/Downloads/Release.asp?ReleaseID=43681

Microsoft Windows XP Professional

• Microsoft Q328940
  http://www.microsoft.com/Downloads/Release.asp?ReleaseID=43681

Microsoft Windows XP 64-bit Edition

• Microsoft Q328940
  http://www.microsoft.com/Downloads/Release.asp?ReleaseID=43676