Buffer Overrun Occurs When You Start Winhlp32.exe Under NTSD (293338)

SYMPTOMS

There is a buffer overrun in Winhelp32.exe. A malicious user can exploit this buffer overrun to run code in the user's security context. This permits the malicious user to perform any actions that a legitimate user can perform. A malicious user can exploit this vulnerability by using a malicious Web page or by using an HTML-based e-mail message.

By default, the HTML exploit is blocked if you are using Microsoft Outlook Express 6 or Microsoft Outlook 2002, or if you installed the Outlook E-mail Security Update in Microsoft Outlook 98 or Microsoft Outlook 2000.