Microsoft Html Help Workshop vulnerabilities

4 CVEs affecting Microsoft Html Help Workshop, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-0133, published 2009-01-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-0564, published 2006-02-06. High severity, CVSS 7.5. EPSS: 71.7% chance of exploitation in the next 30 days. Stack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier versions, and as included in the Microsoft HTML Help 1.4 SDK, allows context-dependent attackers to…
CVE-2009-0133, published 2009-01-15. High severity, CVSS 10.0. EPSS: 67% chance of exploitation in the next 30 days. Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a long "Index file" field, possibly a related issue…
CVE-2007-0352, published 2007-01-19. High severity, CVSS 9.3. EPSS: 36.8% chance of exploitation in the next 30 days. Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitrary code via a crafted .cnt file composed of lines that begin with an integer…
CVE-2007-0427, published 2007-01-23. High severity, CVSS 9.3. EPSS: 31.2% chance of exploitation in the next 30 days. Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitrary code via a help project (.HPJ) file with a long HLP field in the OPTIONS…