Microsoft Windows HTML Help ActiveX code execution
Published:		13.02.2007
Source:		MICROSOFT
SecurityVulns ID:		7226
Type:		client
Level:		7/10
Description:		It's possible to access unsafe functions from web page. Vulnerability can be used for hidden malware installation.

Affected:		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server
CVE:		CVE-2007-0214 (The HTML Help ActiveX control (Hhctrl.ocx) in Microsoft Windows 2000 SP3, XP SP2 and Professional, 2003 SP1 allows remote attackers to execute arbitrary code via unspecified functions, related to uninitialized parameters.)

Original document

MICROSOFT, Microsoft Security Bulletin MS07-008 Vulnerability in HTML Help ActiveX Control Could Allow Remote Code Execution (928843) (13.02.2007)

Files:		Microsoft Security Bulletin MS07-008 Vulnerability in HTML Help ActiveX Control Could Allow Remote Code Execution (928843)
Discuss:		Read or add your comments to this news (0 comments)