CVE ID:	CVE-2002-0693
Description:	Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via (1) a long parameter to the Alink function, or (2) script containing a long argument to the showHelp function.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2002-0693 BugTraq ID: 5874 http://www.securityfocus.com/bid/5874 Bugtraq: 20021003 Buffer Overflow in IE/Outlook HTML Help (Google Search) http://marc.info/?l=bugtraq&m=103365849505409&w=2 Bugtraq: 20021009 Thor Larholm security advisory TL#004 (Google Search) http://marc.info/?l=bugtraq&m=103419115517344&w=2 Bugtraq: 20021010 prover of concept code of windows help overflow (Google Search) http://marc.info/?l=bugtraq&m=103435279404182&w=2 Microsoft Security Bulletin: MS02-055 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-055 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A374 XForce ISS Database: win-html-help-bo(10253) http://www.iss.net/security_center/static/10253.php