Integer underflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via a malformed .hlp file, which leads to a heap-based buffer overflow.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Windows_2000 | Microsoft | * | * |
| Windows_2000 | Microsoft | * | * |
| Windows_2000 | Microsoft | * | * |
| Windows_2000 | Microsoft | * | * |
| Windows_2000 | Microsoft | * | * |
| Windows_2003_server | Microsoft | enterprise | enterprise |
| Windows_2003_server | Microsoft | enterprise | enterprise |
| Windows_2003_server | Microsoft | enterprise_64-bit | enterprise_64-bit |
| Windows_2003_server | Microsoft | r2 | r2 |
| Windows_2003_server | Microsoft | r2 | r2 |
| Windows_2003_server | Microsoft | r2 | r2 |
| Windows_2003_server | Microsoft | standard | standard |
| Windows_2003_server | Microsoft | standard | standard |
| Windows_2003_server | Microsoft | web | web |
| Windows_2003_server | Microsoft | web | web |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_nt | Microsoft | 4.0 | 4.0 |
| Windows_xp | Microsoft | * | * |
| Windows_xp | Microsoft | * | * |
| Windows_xp | Microsoft | * | * |
| Windows_xp | Microsoft | * | * |
| Windows_xp | Microsoft | * | * |
| Windows_xp | Microsoft | * | * |
| Windows_xp | Microsoft | * | * |
| Windows_xp | Microsoft | * | * |
| Windows_xp | Microsoft | * | * |