$ cve CVE-2002-0693 JSON

CVE-2002-0693 EXPLOIT

7.5

HIGH · CVSS 2.0 · EPSS 31.3% (pctl 98)

Patch early

A public exploit exists.

Description

Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via (1) a long parameter to the Alink function, or (2) script containing a long argument to the showHelp function.

Scoring

CVSS	7.5 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS	31.34% — more likely to be exploited than 98% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2002-10-10
Last modified	2026-06-16

Affected (7)

Vendor	Product
microsoft	windows 2000
microsoft	windows 2000 terminal services
microsoft	windows 98
microsoft	windows 98se
microsoft	windows me
microsoft	windows nt
microsoft	windows xp

Public exploits

Source	Title	Date
exploit-db	Microsoft Windows XP/2000/NT 4.0 - Help Facility ActiveX Control Buffer Overflow	2002-10-07

References

→ the Explorer · watch your stack · NVD