Heap-based buffer overflow in Microsoft Windows Help winhlp32.exe allows user-assisted attackers to execute arbitrary code via crafted embedded image data in a .hlp file.
- http://securityreason.com/securityalert/700
No PoCs found on GitHub currently.