CVE-2006-0564

HighPublished

Stack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier versions, and as included in the Microsoft HTML Help 1.4 SDK,...

Published: Feb 6, 2006
Updated: Aug 7, 2024
Assigning CNA: mitre
Evidence observed: Feb 6, 2006

Primary CVSS

7.5/ 10High

nvd · CVSS 2.0

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS probability estimate

71.7%

High · next 30 days

Percentile: 99.4%
Model date: Oct 15, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

Stack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier versions, and as included in the Microsoft HTML Help 1.4 SDK, allows context-dependent attackers to execute arbitrary code via a .hhp file with a long Contents file field.

Sources

Repository evidence: Files: 2 · Repositories: 1

2 Module

HTML Help Workshop 4.74 (hhp Project File) Buffer OverflowModule
modules/exploits/windows/fileformat/hhw_hhp_compiledfile_bof.rb
Metasploit Framework modules
ExploitEvidence observed: Sep 26, 2026Revision: b22ce1fbae63Related tool
Declared conditions
- platform: Windows($.exploit_windows/fileformat/hhw_hhp_compiledfile_bof.platform)
- verification: check_not_declared($.exploit_windows/fileformat/hhw_hhp_compiledfile_bof.check)
HTML Help Workshop 4.74 (hhp Project File) Buffer OverflowModule
modules/exploits/windows/fileformat/hhw_hhp_contentfile_bof.rb
Metasploit Framework modules
ExploitEvidence observed: Sep 26, 2026Revision: b22ce1fbae63Related tool
Declared conditions
- platform: Windows($.exploit_windows/fileformat/hhw_hhp_contentfile_bof.platform)
- verification: check_not_declared($.exploit_windows/fileformat/hhw_hhp_contentfile_bof.check)

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.