CVE-2003-0907
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 22%
probabilidade de exploração
22%top 2% das CVEs
exploração observada
nãonenhuma fonte reporta
Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// URL, which are not quoted when constructing the argument list to HelpCtr.exe.
Produtos afetados
n/a · n/aReferências
http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020065.htmlhttp://marc.info/?l=bugtraq&m=108196864221676&w=2https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011https://exchange.xforce.ibmcloud.com/vulnerabilities/15704https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1000https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A904http://www.ciac.org/ciac/bulletins/o-114.shtmlhttp://www.idefense.com/application/poi/display?id=100&type=vulnerabilitieshttp://www.kb.cert.org/vuls/id/260588http://www.securityfocus.com/bid/10119http://www.us-cert.gov/cas/techalerts/TA04-104A.html