Lucene search

MitreCVE-2002-0694

HistorySep 01, 2004 - 4:00 a.m.

CVE-2002-0694

2004-09-0104:00:00

mitre

web.nvd.nist.gov

html help

microsoft windows

code execution

.chm files

remote attack

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

High

EPSS

0.04

Percentile

92.1%

JSON

The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP uses the Local Computer Security Zone when opening .chm files from the Temporary Internet Files folder, which allows remote attackers to execute arbitrary code via HTML mail that references or inserts a malicious .chm file containing shortcuts that can be executed, aka “Code Execution via Compiled HTML Help File.”

Affected configurations

Nvd

Node

microsoftwindows_2000

microsoftwindows_2000sp1

microsoftwindows_2000sp2

microsoftwindows_2000sp3

microsoftwindows_2000_terminal_services

microsoftwindows_2000_terminal_servicessp1

microsoftwindows_2000_terminal_servicessp2

microsoftwindows_2000_terminal_servicessp3

microsoftwindows_98gold

microsoftwindows_98se

microsoftwindows_me

microsoftwindows_ntMatch4.0enterprise_server

microsoftwindows_ntMatch4.0server

microsoftwindows_ntMatch4.0terminal_server

microsoftwindows_ntMatch4.0workstation

microsoftwindows_ntMatch4.0sp1enterprise_server

microsoftwindows_ntMatch4.0sp1server

microsoftwindows_ntMatch4.0sp1terminal_server

microsoftwindows_ntMatch4.0sp1workstation

microsoftwindows_ntMatch4.0sp2enterprise_server

microsoftwindows_ntMatch4.0sp2server

microsoftwindows_ntMatch4.0sp2terminal_server

microsoftwindows_ntMatch4.0sp2workstation

microsoftwindows_ntMatch4.0sp3enterprise_server

microsoftwindows_ntMatch4.0sp3server

microsoftwindows_ntMatch4.0sp3terminal_server

microsoftwindows_ntMatch4.0sp3workstation

microsoftwindows_ntMatch4.0sp4enterprise_server

microsoftwindows_ntMatch4.0sp4server

microsoftwindows_ntMatch4.0sp4terminal_server

microsoftwindows_ntMatch4.0sp4workstation

microsoftwindows_ntMatch4.0sp5enterprise_server

microsoftwindows_ntMatch4.0sp5server

microsoftwindows_ntMatch4.0sp5terminal_server

microsoftwindows_ntMatch4.0sp5workstation

microsoftwindows_ntMatch4.0sp6enterprise_server

microsoftwindows_ntMatch4.0sp6server

microsoftwindows_ntMatch4.0sp6terminal_server

microsoftwindows_ntMatch4.0sp6workstation

microsoftwindows_ntMatch4.0sp6aenterprise_server

microsoftwindows_ntMatch4.0sp6aserver

microsoftwindows_ntMatch4.0sp6aterminal_server

microsoftwindows_ntMatch4.0sp6aworkstation

microsoftwindows_xphome

microsoftwindows_xpgoldprofessional

microsoftwindows_xpsp1home

VendorProductVersionCPE
microsoftwindows_2000*cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*
microsoftwindows_2000*cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*
microsoftwindows_2000*cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*
microsoftwindows_2000*cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*
microsoftwindows_2000_terminal_services*cpe:2.3:o:microsoft:windows_2000_terminal_services:*:*:*:*:*:*:*:*
microsoftwindows_2000_terminal_services*cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp1:*:*:*:*:*:*
microsoftwindows_2000_terminal_services*cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp2:*:*:*:*:*:*
microsoftwindows_2000_terminal_services*cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp3:*:*:*:*:*:*
microsoftwindows_98*cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*
microsoftwindows_98se*cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_2000	*	cpe:2.3:o:microsoft:windows_2000::::::::
microsoft	windows_2000	*	cpe:2.3:o:microsoft:windows_2000::sp1::::::*
microsoft	windows_2000	*	cpe:2.3:o:microsoft:windows_2000::sp2::::::*
microsoft	windows_2000	*	cpe:2.3:o:microsoft:windows_2000::sp3::::::*
microsoft	windows_2000_terminal_services	*	cpe:2.3:o:microsoft:windows_2000_terminal_services::::::::
microsoft	windows_2000_terminal_services	*	cpe:2.3:o:microsoft:windows_2000_terminal_services::sp1::::::*
microsoft	windows_2000_terminal_services	*	cpe:2.3:o:microsoft:windows_2000_terminal_services::sp2::::::*
microsoft	windows_2000_terminal_services	*	cpe:2.3:o:microsoft:windows_2000_terminal_services::sp3::::::*
microsoft	windows_98	*	cpe:2.3:o:microsoft:windows_98::gold::::::*
microsoft	windows_98se	*	cpe:2.3:o:microsoft:windows_98se::::::::

Rows per page:

1-10 of 461

References

www.iss.net/security_center/static/10254.php

docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-055

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A403

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

High

EPSS

0.04

Percentile

92.1%

JSON

Related for CVE-2002-0694