VDB
CVE-2006-0564
CVE-2006-0564
PUBLISHED
KEV
CVSS 7.5 HIGH
Stack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier versions, and as included in the Microsoft HTML Help 1.4 SDK, allows context-dependent attackers to execute arbitrary code via a .hhp file with a long Contents file field.
EPSS 82.71% · 99.3th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
82.71%
99.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| microsoft | html_help | 1.4 |
| microsoft | html_help_workshop | 4.74.8702.0 |
| n/a | n/a | n/a |
Timeline
- CVE Published
- Jan 12, 2009 PoC Published
- Dec 5, 2009 PoC Published
- Sep 25, 2010 PoC Published
- May 29, 2018 PoC Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
References
- 18740 third-party-advisory
- 22941 vdb
- 1015585 vdb
- mshtmlhelp-workshop-hhp-bo(24481) vdb
- http://users.pandora.be/bratax/advisories/b008.html url
- VU#124460 third-party-advisory
- ADV-2006-0446 vdb
- https://nvd.nist.gov/vuln/detail/CVE-2006-0564 advisory