CVE-2009-0133

CVE Database · CVE-2009-0133

CVE-2009-0133

· N/AModified

CVSS v3.1

N/A

EPSS

67.05%

Published

Jan 15, 2009

Modified

Apr 22, 2026

Public PoC / Exploit (8)

All weaponized →

Exploit-DBMicrosoft HTML Help Workshop - '.hhp' Denial of Service Exploit-DBMicrosoft HTML Help Workshop - '.hhp' Local Buffer Overflow (1)Exploit-DBMicrosoft HTML Help Workshop - '.hhp' Local Buffer Overflow (2)Exploit-DBMicrosoft HTML Help Workshop - '.hhp' Local Buffer Overflow (3)Exploit-DBMicrosoft HTML Help Workshop 4.74 - '.hhp' Index Buffer Overflow (Metasploit) (3)Exploit-DBMicrosoft HTML Help Workshop 4.74 - '.hhp' Local Buffer Overflow (1)Exploit-DBMicrosoft HTML Workshop 4.74 - Universal Buffer Overflow TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a long "Index file" field, possibly a related issue to CVE-2006-0564.

Weaknesses (CWE)

CWE-119

Affected Products (1)

microsoft · html_help_workshopvulnerable

References (4)

http://securityreason.com/securityalert/4914

https://www.exploit-db.com/exploits/7727

http://securityreason.com/securityalert/4914

https://www.exploit-db.com/exploits/7727

KEV Catalog EPSS Scores Vendors All CVEs