CVE:CVE-2004-1361
CNNVD:CNNVD-200412-105
Windows NT，Windows 2000至SP4版本，Windows XP至SP2版本和Windows 2003的winhlp32.exe存在整数下溢漏洞。远程攻击者可以借助畸形.hlp文件执行任意代码，导致基于堆的缓冲区溢出。
solution:Upgrade microsoft windows_2000 to a higher version than *,*:sp1,*:sp2,*:sp3,*:sp4,and avoid the version *:sp1,*:sp2,*:sp3,*:sp4; Upgrade microsoft windows_2003_server to a higher version than enterprise,enterprise:sp1_beta_1,enterprise_64-bit,r2,r2:sp1_beta_1,standard,standard:sp1_beta_1,web,web:sp1_beta_1,and avoid the version enterprise,enterprise:sp1_beta_1,enterprise_64-bit,r2,r2:sp1_beta_1,standard,standard:sp1_beta_1,web,web:sp1_beta_1; Upgrade microsoft windows_nt to a higher version than 4.0,4.0:sp1,4.0:sp2,4.0:sp3,4.0:sp4,4.0:sp5,4.0:sp6,4.0:sp6a,and avoid the version 4.0,4.0:sp1,4.0:sp2,4.0:sp3,4.0:sp4,4.0:sp5,4.0:sp6,4.0:sp6a; Upgrade microsoft windows_xp to a higher version than *,*:gold,*:sp1,*:sp2,and avoid the version *:gold,*:sp1,*:sp2