Threat level definition
Search:
Home
Bugtraq
Vulnerabilities
Mailing Lists
Jobs
Tools
Beta Programs
News
Infocus
Foundations
Microsoft
Unix
IDS
Incidents
Virus
Pen-Test
Firewalls
Columnists
Mailing Lists
Newsletters
Bugtraq
Focus on IDS
Focus on Linux
Focus on Microsoft
Forensics
Pen-test
Security Basics
Vuln Dev
Vulnerabilities
Jobs
Job Opportunities
Resumes
Job Seekers
Employers
Tools
RSS
News
Vulns
Security Research
BugTraq
Back to list
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
Re: Microsoft Help (WINHLP32.EXE) - Multiple Remote Code Execution and Denial Of Service Vulnerabilities
Aug 12 2006 07:54PM
Reversemode (advisories reversemode com)
Hi,
Nobody should open an untrusted .HLP file.
An HLP file is the most similar to an executable but not being one,
mainly due to its powerful scripting language.
One of the documented macros documented and supported by this format is
"RegisterRoutine". Using this macro we can reference any Export...
[ more ]
Privacy Statement
Copyright 2009, SecurityFocus
Nobody should open an untrusted .HLP file.
An HLP file is the most similar to an executable but not being one,
mainly due to its powerful scripting language.
One of the documented macros documented and supported by this format is
"RegisterRoutine". Using this macro we can reference any Export...
[ more ]