CVE-2007-0427 Information

Description

Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitrary code via a help project (.HPJ) file with a long HLP field in the OPTIONS section.

Reference

http://osvdb.org/31899 http://secunia.com/advisories/23862 http://securityreason.com/securityalert/2177 http://www.anspi.pl/~porkythepig/visualization/hpj-x01.cpp http://www.securityfocus.com/archive/1/457436/100/0/threaded http://www.securityfocus.com/bid/22135