Back to search
CVE-2003-0907
Published: Apr 16, 2004
Modified: Aug 8, 2024
PUBLISHED
Description
Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// URL, which are not quoted when constructing the argument list to HelpCtr.exe.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
O-114
third-party-advisory
government-resource
x_refsource_CIAC
VU#260588
third-party-advisory
x_refsource_CERT-VN
10119
vdb-entry
x_refsource_BID
oval:org.mitre.oval:def:1000
vdb-entry
signature
x_refsource_OVAL
MS04-011
vendor-advisory
x_refsource_MS
oval:org.mitre.oval:def:904
vdb-entry
signature
x_refsource_OVAL
TA04-104A
third-party-advisory
x_refsource_CERT
20040413 Microsoft Help and Support Center argument injection vulnerability
mailing-list
x_refsource_FULLDISC
20040413 [Full-Disclosure] iDEFENSE Security Advisory 04.13.04 - Microsoft Help and Support
mailing-list
x_refsource_BUGTRAQ
win-hcpurl-code-execution(15704)
vdb-entry
x_refsource_XF
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now