CVE-2009-0133: Microsoft Html Help Workshop

High severity, CVSS 10.0. EPSS: 67% chance of exploitation in the next 30 days.

Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a long "Index file" field, possibly a related issue to CVE-2006-0564.

Affected products

• Microsoft Html Help Workshop: version 4.74 only

Published 2009-01-15. Last modified 2026-06-16.