CVE-2004-1361

None

CVSS

—

EPSS

20.0%

Published

Dec 23, 2004

CISA due date

—

The record

Integer underflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via a malformed .hlp file, which leads to a heap-based buffer overflow.

Affected packages

Ecosystem	Package	Introduced	Fixed