CVE-2004-0474

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 16%

from disclosure to weapon0 days

Published on NVDMay 20

1st PoCFeb 9

exploitation probability

16%top 3% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Help Center (HelpCtr.exe) may allow remote attackers to read or execute arbitrary files via an "http://" or "file://" argument to the topic parameter in an hcp:// URL. NOTE: since the initial report of this problem, several researchers have been unable to reproduce this issue.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/23675

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0440.html http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0450.html http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0688.html http://marc.info/?l=bugtraq&m=107652584102003&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/15101 http://www.securityfocus.com/archive/1/353248 http://www.securityfocus.com/bid/9621