CVE ID:	CVE-2004-0201
Description:	Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0201 Cert/CC Advisory: TA04-196A http://www.us-cert.gov/cas/techalerts/TA04-196A.html CERT/CC vulnerability note: VU#920060 http://www.kb.cert.org/vuls/id/920060 http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023919.html Microsoft Security Bulletin: MS04-023 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-023 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1503 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1530 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2155 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3179 XForce ISS Database: win-htmlhelp-execute-code(16586) https://exchange.xforce.ibmcloud.com/vulnerabilities/16586