CVE:CVE-2006-0564
CNNVD:CNNVD-200602-066
Microsoft HTML Help Workshop 4.74.8702.0(可能还包括之前的版本)以及Microsoft HTML Help 1.4 SDK中存在栈缓冲区溢出漏洞。与上下文相关的攻击者可以借助带有长 Contents 文件字段的.hhp文件执行任意代码。
solution:Upgrade microsoft html_help to a higher version than 1.4,and avoid the version 1.4; Upgrade microsoft html_help_workshop to a higher version than 4.74.8702.0,and avoid the version 4.74.8702.0