CVE:CVE-2002-0693
CNNVD:CNNVD-200210-246
Microsoft Windows 98版本、98 Second Edition、Millennium Edition、NT 4.0版本、NT 4.0 Terminal Server Edition、Windows 2000版本和Windows XP版本中HTML Help ActiveX Control (hhctrl.ocx)存在缓冲区溢出漏洞。远程攻击者可以借助（1）Alink函数的超长参数，或（2）包含showHelp函数中超长参数的脚本执行代码。
solution:Upgrade microsoft windows_2000 to a higher version than *,*:sp1,*:sp2,*:sp3,and avoid the version *:sp1,*:sp2,*:sp3; Upgrade microsoft windows_2000_terminal_services to a higher version than *,*:sp1,*:sp2,*:sp3,and avoid the version *:sp1,*:sp2,*:sp3; Upgrade microsoft windows_98 to a higher version than *:gold,and avoid the version *:gold; Upgrade microsoft windows_98se to a higher version than *; Upgrade microsoft windows_me to a higher version than *; Upgrade microsoft windows_nt to a higher version than 4.0,4.0:sp1,4.0:sp2,4.0:sp3,4.0:sp4,4.0:sp5,4.0:sp6,4.0:sp6a,and avoid the version 4.0,4.0:sp1,4.0:sp2,4.0:sp3,4.0:sp4,4.0:sp5,4.0:sp6,4.0:sp6a; Upgrade microsoft windows_xp to a higher version than *,*:gold,*:sp1,and avoid the version *:gold,*:sp1