CVE-2004-0201: Avaya Definity One Media Server

High severity, CVSS 10.0. EPSS: 45.3% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041.

Affected products

• Avaya Definity One Media Server: any version
• Avaya IP600 Media Servers: any version
• Avaya Modular Messaging Message Storage Server: version s3400 only
• Avaya s8100: any version
• Microsoft Windows 2000: any version
• Microsoft Windows 2003 Server: version enterprise only; version enterprise_64-bit only; version r2 only; version standard only; version web only
• Microsoft Windows 98: any version
• Microsoft Windows 98se: any version
• Microsoft Windows Me: any version
• Microsoft Windows Nt: version 4.0 only
• Microsoft Windows XP: any version

Published 2004-08-06. Last modified 2026-06-16.