vendor:
Unknown
by:
Unknown
9
CVSS
CRITICAL
Buffer Overrun
119
CWE
Product Name: Unknown
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: NO
Related CWE: Unknown
CPE: helpctr.exe
Platforms Tested:
Unknown
Buffer Overrun Vulnerability in helpctr.exe
The vulnerability exists due to insufficient bounds checking on input supplied via the HCP URI parameter. An attacker can exploit this vulnerability by making a HCP request with an overly long string. This will trigger the overflow condition and may result in malicious attacker-supplied code being executed on the vulnerable system.
Mitigation:
Unknown
