CVE-2009-0133
CVE-2009-0133
Vexday Risk Score
50Attention
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Functional exploit
Automatable exploit available (Nuclei/Metasploit).
CVSS —EPSS 67.0%KEV nãoPoC públicaNuclei —Metasploit simPatch —
Lifecycle
06 Feb 2006Public PoC
15 Jan 2009Published on NVD
17 Jan 2009Metasploit module available
Weaponization speed
1 daysto Metasploit module
Weaponized quickly — attackers prioritized this vulnerability. Patch urgently.
Recommendation: Plan a near-term fix — a public PoC already exists.
Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a long "Index file" field, possibly a related issue to CVE-2006-0564.
Affected products
n/a · n/apublic PoCs found — 7
exploitdbwww.exploit-db.com/exploits/1488unverifiedexploitdbwww.exploit-db.com/exploits/1470unverifiedexploitdbwww.exploit-db.com/exploits/1490unverifiedexploitdbwww.exploit-db.com/exploits/1495unverifiedexploitdbwww.exploit-db.com/exploits/16631unverifiedexploitdbwww.exploit-db.com/exploits/10321unverifiedcve_referencewww.exploit-db.com/exploits/7727unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.