Vulnerability Description
Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via (1) a long parameter to the Alink function, or (2) script containing a long argument to the showHelp function.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows 2000 | All versions |
| Microsoft | Windows 2000 Terminal Services | All versions |
| Microsoft | Windows 98 | All versions |
| Microsoft | Windows 98Se | All versions |
| Microsoft | Windows Me | All versions |
| Microsoft | Windows Nt | 4.0 |
| Microsoft | Windows Xp | All versions |
References
- http://marc.info/?l=bugtraq&m=103365849505409&w=2
- http://marc.info/?l=bugtraq&m=103419115517344&w=2
- http://marc.info/?l=bugtraq&m=103435279404182&w=2
- http://www.iss.net/security_center/static/10253.phpVendor Advisory
- http://www.securityfocus.com/bid/5874
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-05
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3
- http://marc.info/?l=bugtraq&m=103365849505409&w=2
- http://marc.info/?l=bugtraq&m=103419115517344&w=2
- http://marc.info/?l=bugtraq&m=103435279404182&w=2
- http://www.iss.net/security_center/static/10253.phpVendor Advisory
- http://www.securityfocus.com/bid/5874
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-05
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3
FAQ
What is CVE-2002-0693?
CVE-2002-0693 is a vulnerability with a CVSS score of 7.5 (HIGH). Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allow...
How severe is CVE-2002-0693?
CVE-2002-0693 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2002-0693?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Windows 2000, Microsoft Windows 2000 Terminal Services, Microsoft Windows 98, Microsoft Windows 98Se, Microsoft Windows Me.