Test ID:	13641
Category:	Windows
Title:	Vulnerability in HTML Help Could Allow Code Execution (840315)
Summary:	NOSUMMARY
Description:	Description: The remote host is subject to two vulnerabilities in the HTML Help and showHelp modules, which could allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to set up a rogue website containing a malicious showHelp URL, and would need to lure a user on the remote host to visit it. Once the user visits the web site, a buffer overflow would allow the attacker to execute arbitrary commands with the privileges of the victim user. Solution : http://www.microsoft.com/technet/security/bulletin/ms04-023.mspx Risk factor : High
Cross-Ref:	BugTraq ID: 10705 BugTraq ID: 9320 Common Vulnerability Exposure (CVE) ID: CVE-2004-0201 Cert/CC Advisory: TA04-196A http://www.us-cert.gov/cas/techalerts/TA04-196A.html CERT/CC vulnerability note: VU#920060 http://www.kb.cert.org/vuls/id/920060 http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023919.html Microsoft Security Bulletin: MS04-023 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-023 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1503 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1530 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2155 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3179 XForce ISS Database: win-htmlhelp-execute-code(16586) https://exchange.xforce.ibmcloud.com/vulnerabilities/16586 Common Vulnerability Exposure (CVE) ID: CVE-2003-1041 http://www.securityfocus.com/bid/9320 Bugtraq: 20031230 IE 5.x-6.0 allows executing arbitrary programs using showHelp() (Google Search) http://www.securityfocus.com/archive/1/348521 CERT/CC vulnerability note: VU#187196 http://www.kb.cert.org/vuls/id/187196 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1186 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1943 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3514 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A956 XForce ISS Database: ie-showhelp-directory-traversal(14105) https://exchange.xforce.ibmcloud.com/vulnerabilities/14105
Copyright	This script is Copyright (C) 2004 Tenable Network Security

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.