Intrusion PreventionMS.Windows.Help.File.Heap.Buffer.Overflow
Description
This indicates an attack attempt against a buffer-overflow vulnerability in the Microsoft Windows Help File viewer.
The vulnerability is caused by an error when the vulnerable software handles a malformed embedded image in a .hlp file. A remote attacker may exploit this to execute arbitrary code.
Affected Products
Microsoft Corporation: Windows 2000 Any version
Microsoft Corporation: Windows 2003 Any version
Microsoft Corporation: Windows NT 4.0
Microsoft Corporation: Windows XP Any version
Impact
System compromise.
Recommended Actions
Currently, we are not aware of any official fix for this issue. Please do not open any distrustful .hlp file.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 13293 |
| Created | Oct 17, 2006 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2006-1591 |
| Exploit Prediction Score | 39.16% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |