The Active Network
ActiveMac Anonymous | Create a User | Reviews | News | Forums | Advertise  
 

  *  

  Unchecked Buffer in Windows Help Facility Could Enable Code Execution (Q323255)
Time: 02:00 EST/07:00 GMT | News Source: Microsoft | Posted By: Byron Hinson

The HTML Help facility in Windows includes an ActiveX control that provides much of its functionality. One of the functions exposed via the control contains an unchecked buffer, which could be exploited by a web page hosted on an attacker’s site or sent to a user as an HTML mail. An attacker who successfully exploited the vulnerability would be able to run code in the security context of the user, thereby gaining the same privileges as the user on the system.

A second vulnerability exists because of flaws associated with the handling of compiled HTML Help (.chm) files that contain shortcuts. Because shortcuts allow HTML Help files to take any desired action on the system, only trusted HTML Help files should be allowed to use them. Two flaws allow this restriction to be bypassed. First, the HTML Help facility incorrectly determines the Security Zone in the case where a web page or HTML mail delivers a .chm file to the Temporary Internet Files folder and subsequently opens it. Instead of handling the .chm file in the correct zone – the one associated with the web page or HTML mail that delivered it – the HTML Help facility incorrectly handles it in the Local Computer Zone, thereby considering it trusted and allowing it to use shortcuts. This error is compounded by the fact that the HTML Help facility doesn’t consider what folder the content resides in. Were it to do so, it could recover from the first flaw, as content within the Temporary Internet Folder is clearly not trusted, regardless of the Security Zone it renders in.

The attack scenario for this vulnerability would be complex, and involves using an HTML mail to deliver a .chm file that contains a shortcut, then making use of the flaws to open it and allow the shortcut to execute. The shortcut would be able to perform any action the user had privileges to perform on the system.

Patch availability

Download locations for this patch
The patches for all Windows systems are available via Windows Update or can be manually applied via the following patches:

Write Comment
Return to News

  Displaying 501 through 521 of 521
Prev | First
  The time now is 2:05:17 PM ET.
Any comment problems? E-mail us
#501 By 4240821 (45.159.125.123) at 5/2/2025 5:09:00 PM
https://telegra.ph/Van-der-Linde-Gangs-Wild-West-Saga-04-28
https://telegra.ph/Jordan-Travis-NFL-QB-with-Fried-Facts-04-30
https://telegra.ph/RFK-Stadium-Redevelopment-Plans-Unveiled-04-28
https://telegra.ph/Lapu-Lapu-Day-Stampede-Claims-Lives-04-28
https://telegra.ph/Comerica-Bank-Cyber-Heist-1M-Vanishes-05-02
https://telegra.ph/SBA-Fraud-Pandemic-Relief-Scam-Fallout-04-30
https://telegra.ph/Caribbean-Population-Trends-Haiti-and-Cuba-04-29
https://telegra.ph/Yoendrys-GĂłmez-The-Fall-of-a-Baseball-Prospect-04-30
https://telegra.ph/Messi-Saves-Inter-Miami-in-Last-Minute-Win-04-30
https://telegra.ph/Shadow-Plague-2025s-Mysterious-Virus-05-01

#502 By 4240821 (172.120.211.50) at 5/2/2025 9:46:57 PM
https://telegra.ph/Last-of-Us-Air-Time-and-Schedule-Facts-04-28
https://telegra.ph/Tulsa-Weather-Updates-and-Sources-05-02
https://telegra.ph/Hal-Puthoff-Unveils-Zero-Point-Energy-Breakthrough-05-01
https://telegra.ph/Surprising-Facts-About-US-Jobs-Report-05-02
https://telegra.ph/Zurich-Classic-Awards-1286-Million-Payout-04-28
https://telegra.ph/Juárez-Pumas-The-Beast-Among-Us-04-28
https://telegra.ph/Robert-De-Niros-Final-Truthful-Role-04-30
https://telegra.ph/St-Louis-Blues-The-Curse-of-the-Blue-Note-05-01
https://telegra.ph/Mike-Peters-Saves-Stranded-Hikers-in-Rescue-04-29
https://telegra.ph/Warriors-Edge-Rockets-in-Overtime-Thriller-05-01-2

#503 By 4240821 (172.120.164.135) at 5/3/2025 8:19:21 PM
https://telegra.ph/Dodgers-vs-Braves-Dugout-Drama-Walk-Off-Thriller-05-03
https://telegra.ph/Tulsa-Weather-Updates-and-Sources-05-02
https://telegra.ph/Ryan-Garcia-Fight-Time-and-Prep-05-02
https://telegra.ph/Hockey-Rivalry-Turns-Deadly-in-Wild-Feud-04-30
https://telegra.ph/Dillon-Brooks-From-Villain-to-Champion-05-03
https://telegra.ph/Julius-Randles-Strengths-and-Weaknesses-Analyzed-05-01
https://telegra.ph/Cavaliers-Edge-Heat-in-Thrilling-Game-04-28
https://telegra.ph/Tottenham-vs-BodøGlimt-Match-Inquiry-05-01
https://telegra.ph/Trump-Renaming-Veterans-Day-Rumor-Debunked-05-02
https://telegra.ph/Yankees-Dominate-Orioles-in-High-Scoring-Game-04-29

#504 By 4240821 (172.252.110.231) at 5/4/2025 8:17:23 PM
https://telegra.ph/May-the-4th-The-Lost-Holocron-Adventure-05-04
https://telegra.ph/Martin-Bakoles-Rise-to-Heavyweight-Glory-05-04
https://telegra.ph/Addison-Raes-Journey-to-Fame-05-01
https://telegra.ph/Bianca-Censoris-Bold-Melbourne-Architecture-Controversy-05-02
https://telegra.ph/John-Wicks-Pain-Filled-Journey-Explained-04-30
https://telegra.ph/Simone-Biles-Secures-Sixth-World-Title-05-04
https://telegra.ph/Julien-Bakers-Vanishing-Mystery-Unveiled-05-04
https://telegra.ph/Lawyer-Sues-Client-at-Wedding-Reception-05-03
https://telegra.ph/Detroit-Tigers-True-Crime-Mystery-Revealed-05-02
https://telegra.ph/Connor-Hellebuyck-From-Small-Town-Goaltender-to-NHL-Star-05-03

#505 By 4240821 (142.111.246.151) at 5/5/2025 5:43:00 AM
https://telegra.ph/Sydney-Sweeneys-Shocking-Hollywood-Scandal-Revealed-05-04
https://telegra.ph/Meet-the-Press-Chaos-After-On-Air-Meltdown-05-04
https://telegra.ph/Inquiry-on-Render-Judgement-Kentucky-Derby-05-03
https://telegra.ph/Canelo-Alvarez-Fight-Analysis-and-Predictions-05-04
https://telegra.ph/Halleys-Comet-2025-Cosmic-Adventure-Begins-05-05
https://telegra.ph/Roma-Triumphs-Over-Fiorentina-in-Thrilling-Match-05-04
https://telegra.ph/José-Ramírez-MLB-and-Boxing-Career-Overview-05-03
https://telegra.ph/REAL-ID-Deadline-and-Compliance-Guide-05-05
https://telegra.ph/Real-Valladolid-vs-Barcelona-Match-Updates-05-03
https://telegra.ph/Europa-League-Trophy-Heist-A-True-Crime-Tale-05-01

#506 By 4240821 (172.252.110.231) at 5/5/2025 10:29:43 AM
https://telegra.ph/Napa-Valleys-Legendary-Wines-Revealed-05-04
https://telegra.ph/Jeffrey-Wright-and-the-Hidden-Truth-05-05
https://telegra.ph/Houthi-Missile-Threat-to-Ben-Gurion-Airport-05-04
https://telegra.ph/Jordan-Spieths-Career-in-Crisis-05-04
https://telegra.ph/Keanu-Carver-Saves-Family-from-Fire-05-03
https://telegra.ph/John-Haliburton-Announces-City-Council-Run-05-01
https://telegra.ph/Majo-Aguilars-Bold-New-Image-Takes-Center-Stage-05-04
https://telegra.ph/Steve-Witkoffs-Fall-from-Real-Estate-Empire-05-01
https://telegra.ph/Canelo-Dominates-Scull-in-Thrilling-Fight-05-04
https://telegra.ph/Levante-Badalona-Robs-Barcelona-in-Copa-05-01

#507 By 4240821 (172.120.164.135) at 5/5/2025 2:01:02 PM
https://telegra.ph/Orlando-Weather-Rainbow-Day-in-Florida-05-04
https://telegra.ph/Inter-Triumphs-Over-Hellas-Verona-in-Thriller-05-03
https://telegra.ph/Dannielynn-Birkhead-Launches-Philanthropic-Foundation-05-03
https://telegra.ph/Prince-Harry-Launches-Veterans-Mental-Health-Program-05-02
https://telegra.ph/ARC-Raiders-Release-Date-Update-2025-05-02
https://telegra.ph/Warriors-vs-Timberwolves-Key-Matchup-Analysis-05-05
https://telegra.ph/CEO-Ashley-Buchanans-Corporate-Scandal-05-01
https://telegra.ph/911-Bobby-Funeral-Episode-Leaves-Fans-Torn-05-02
https://telegra.ph/Kim-Hye-seongs-Acting-and-Music-Career-05-04
https://telegra.ph/Naomi-Osaka-Returns-with-Mental-Health-Foundation-05-03

#508 By 4240821 (176.53.133.118) at 5/6/2025 8:23:12 AM
https://telegra.ph/Teofimo-Lopez-Steals-Lightweight-Throne-05-03
https://telegra.ph/Black-Widow-MCU-and-Comics-Updates-05-02
https://telegra.ph/Dwyane-Wade-Honored-at-2024-ESPYs-05-04
https://telegra.ph/Triston-Casas-Walk-Off-Homer-Saves-Red-Sox-05-03
https://telegra.ph/Steve-Witkoffs-Fall-from-Real-Estate-Empire-05-01
https://telegra.ph/REAL-ID-Deadline-Extended-to-2025-05-05
https://telegra.ph/Anna-Kendricks-Broadway-Dream-Begins-05-03
https://telegra.ph/Mets-vs-Cardinals-Game-Updates-05-03
https://telegra.ph/Star-Wars-Fans-Celebrate-May-the-4th-05-04-2
https://telegra.ph/Noel-Finds-Christmas-Magic-in-Willowbrook-05-01

#509 By 4240821 (45.152.138.219) at 5/10/2025 1:22:12 PM
https://telegra.ph/Maren-Morris-Nashville-Nightmare-Unsolved-05-06
https://telegra.ph/Gears-of-War-Reloaded-Mini-Story-05-05
https://telegra.ph/Columbia-Students-Demand-Fossil-Fuel-Divestment-05-08
https://telegra.ph/Blues-Edge-Jets-in-Overtime-Thriller-05-05
https://telegra.ph/Seattle-Mariners-vs-Oakland-Athletics-Overview-05-06
https://telegra.ph/Brian-Kemp-Announces-Senate-Run-in-Georgia-05-07
https://telegra.ph/Franco-Colapinto-Wins-F2-Monaco-Sprint-Race-05-07
https://telegra.ph/Real-ID-Act-Security-and-Bureaucratic-Challenges-05-07
https://telegra.ph/Final-REAL-ID-Deadline-Extended-to-2025-05-05
https://telegra.ph/Dodgers-vs-Marlins-Wild-Card-Drama-05-05

#510 By 4240821 (46.232.35.74) at 5/25/2025 11:52:05 AM
https://telegra.ph/Emmas-Victory-in-Wordle-May-14-05-14
https://telegra.ph/Home-Depot-Closes-Stores-Amid-Strategy-Shift-05-22
https://telegra.ph/Rick-Tocchet-Named-NHL-Coach-of-the-Year-05-14
https://telegra.ph/Overcompensating-Season-2-Extreme-Problem-Solving-05-17
https://telegra.ph/David-Hyde-Pierce-Finds-Lost-Symphony-05-23
https://telegra.ph/Fortnite-Servers-Crash-During-Chapter-5-Update-05-16
https://telegra.ph/Lakeville-Shelter-in-Place-Orders-Overview-05-15
https://telegra.ph/Dallas-Cowboys-2025-Schedule-Predictions-05-14
https://telegra.ph/Emily-Osments-Magical-Melody-Journey-05-15
https://telegra.ph/Tyran-Stokes-Rising-Basketball-Star-Dominates-Courts-05-17

#511 By 4240821 (45.192.32.27) at 5/30/2025 8:59:55 PM
https://telegra.ph/Stock-Market-Boom-and-Crash-of-Quantum-Chip-05-22
https://telegra.ph/Boston-Globe-Faces-Staff-Mutiny-Crisis-05-17
https://telegra.ph/Alaska-Airlines-Wing-Clip-Inquiry-Explained-05-18
https://telegra.ph/Xcel-Energy-Rescues-Community-in-Storm-05-16
https://telegra.ph/Johnny-Pereda-Baseball-Updates-2024-05-16
https://telegra.ph/Indy-500-Postponed-Due-to-Severe-Weather-05-25
https://telegra.ph/Gilbert-Burns-Dominates-UFC-Fight-Night-05-17
https://telegra.ph/Rockies-Diamondbacks-Scandal-Betrayal-in-Baseball-05-17
https://telegra.ph/Karl-Towns-Disappearance-A-Mystery-Unfolded-05-17
https://telegra.ph/Olive-Grove-Holds-Hope-Amid-Conflict-05-19

#512 By 4240821 (178.217.45.3) at 5/31/2025 4:44:23 PM
https://nsfw.su/v/qs9bxy0lvds8.php
https://nsfw.su/v/2m8k2zbcbl1u.php
https://nsfw.su/v/075upxuqst00.php
https://nsfw.su/v/u1vpxzd8uml4.php
https://nsfw.su/v/s7a8aw1wjh9f.php
https://nsfw.su/v/d4irtgqa5pl7.php
https://nsfw.su/v/s7eoiv32hz5v.php
https://nsfw.su/v/eu22ie3v7tjs.php
https://nsfw.su/v/sr67d2wqwhes.php
https://nsfw.su/v/zis2q3dbgqo2.php

#513 By 4240821 (178.217.45.3) at 6/1/2025 4:51:51 AM
https://nsfw.su/v/s8zkisrcgjqu.php
https://nsfw.su/v/hrw5tbcwiyeh.php
https://nsfw.su/v/mpi5at19qg5t.php
https://nsfw.su/v/j803p43mzk6j.php
https://nsfw.su/v/jgxzoxuqgwxw.php
https://nsfw.su/v/xga76qgxd8ng.php
https://nsfw.su/v/kma793scvlid.php
https://nsfw.su/v/agiopbx4b0ms.php
https://nsfw.su/v/lrp73vs8lo3u.php
https://nsfw.su/v/uphk3ff1z12k.php

#514 By 4240821 (178.217.45.3) at 6/1/2025 9:02:23 PM
https://nsfw.su/v/k1591uz5077s.php
https://nsfw.su/v/nibbcsd4o5ya.php
https://nsfw.su/v/ussgl5fhukyv.php
https://nsfw.su/v/owx100k0gvbm.php
https://nsfw.su/v/i73q68bexmo4.php
https://nsfw.su/v/xfv9icr3dl5f.php
https://nsfw.su/v/2bft2y9t9g2q.php
https://nsfw.su/v/kyf1nlvbkcg3.php
https://nsfw.su/v/i73q68bexmo4.php
https://nsfw.su/v/6wv4q52cwyfz.php

#515 By 4240821 (178.217.45.3) at 6/2/2025 12:10:09 PM
https://nsfw.su/v/wiuz623jja6c.php
https://nsfw.su/v/qd29gt9csci5.php
https://nsfw.su/v/w71vxa0nnmst.php
https://nsfw.su/v/8bbfj4nwfrdi.php
https://nsfw.su/v/09c6jzxf0nod.php
https://nsfw.su/v/kcp8qy81d5q0.php
https://nsfw.su/v/kcp8qy81d5q0.php
https://nsfw.su/v/451eq5f4pqno.php
https://nsfw.su/v/7zhzluv5zpyt.php
https://nsfw.su/v/79g25ocbyr0x.php

#516 By 4240821 (178.217.45.3) at 6/3/2025 1:07:24 AM
https://nsfw.su/v/a44wni0mf8fo.php
https://nsfw.su/v/9if6kumy0cwg.php
https://nsfw.su/v/bhkq6oc36e55.php
https://nsfw.su/v/3zkj1q2lpwzb.php
https://nsfw.su/v/ivj4363mlhpe.php
https://nsfw.su/v/ccjj2lx0fqrk.php
https://nsfw.su/v/nddqxmgwot6d.php
https://nsfw.su/v/t0jgkxf0jckp.php
https://nsfw.su/v/vwtele1zzhut.php
https://nsfw.su/v/y7sj6k5ms69s.php

#517 By 4240821 (178.217.45.3) at 6/3/2025 3:39:54 PM
https://nsfw.su/v/7m2doycwtqsk.php
https://nsfw.su/v/2pge5h06u49k.php
https://nsfw.su/v/vtkciw7tm3nt.php
https://nsfw.su/v/i8ovjt90yu1r.php
https://nsfw.su/v/4tjniiyh6csg.php
https://nsfw.su/v/z25s0vp7oyor.php
https://nsfw.su/v/lznv1sf9guq3.php
https://nsfw.su/v/9tkhlqgrpau0.php
https://nsfw.su/v/gkowznzbwxz1.php
https://nsfw.su/v/hyxg1g69d32m.php

#518 By 4240821 (178.217.45.3) at 6/3/2025 8:19:53 PM
https://nsfw.su/v/4mvks8poe9yr.php
https://nsfw.su/v/71spoq5elpow.php
https://nsfw.su/v/i4a7kiwlswom.php
https://nsfw.su/v/thz1hkm4etc1.php
https://nsfw.su/v/9u1tgmp5f49q.php
https://nsfw.su/v/glpqgikc9qdr.php
https://nsfw.su/v/r3hsk1wthwm8.php
https://nsfw.su/v/njva5mllyf99.php
https://nsfw.su/v/vcb2n6603frl.php
https://nsfw.su/v/g9sw1rgtxq5f.php

#519 By 4240821 (178.217.45.3) at 6/4/2025 5:33:40 PM
https://nsfw.su/v/wtzbkz1rgmr4.php
https://nsfw.su/v/utd5yizeshkm.php
https://nsfw.su/v/9tkhlqgrpau0.php
https://nsfw.su/v/5j2jbggt6c0q.php
https://nsfw.su/v/pg7cer22a5r8.php
https://nsfw.su/v/savw4agkwarr.php
https://nsfw.su/v/9c9k5qt63sqk.php
https://nsfw.su/v/i73q68bexmo4.php
https://nsfw.su/v/6ak76hthkmxc.php
https://nsfw.su/v/mwnu2xskyzu2.php

#520 By 4240821 (178.217.45.3) at 6/5/2025 10:42:47 AM
https://nsfw.su/v/b86lx2swgck2.php
https://nsfw.su/v/4jx7pywt0eca.php
https://nsfw.su/v/cpvg3u73gzkq.php
https://nsfw.su/v/yohq79p5wn12.php
https://nsfw.su/v/fq17a8oa25fi.php
https://nsfw.su/v/me9h9wo51rxm.php
https://nsfw.su/v/njwplh1vlbs7.php
https://nsfw.su/v/sk7jomt2wvse.php
https://nsfw.su/v/q50bpyhqned4.php
https://nsfw.su/v/re2iswf0cry3.php

#521 By 4240821 (178.217.45.3) at 6/5/2025 12:50:06 PM
https://nsfw.su/v/g74uc2hb7hxw.php
https://nsfw.su/v/sez91f914rdd.php
https://nsfw.su/v/4244pejuxgy7.php
https://nsfw.su/v/robx0p0i2398.php
https://nsfw.su/v/nddqxmgwot6d.php
https://nsfw.su/v/td1mj03odq0w.php
https://nsfw.su/v/llrstmn81j7k.php
https://nsfw.su/v/ubbq8m5sl87u.php
https://nsfw.su/v/r3s2ccbjohl6.php
https://nsfw.su/v/bngyfrhxlxbf.php

Write Comment
Return to News
  Displaying 501 through 521 of 521
Prev | First
  The time now is 2:05:17 PM ET.
Any comment problems? E-mail us
User name and password:

 

  *  
  *   *