QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2004-0474

Back to search

CVE-2004-0474

Published: May 20, 2004

Modified: Aug 8, 2024

PUBLISHED

Description

Help Center (HelpCtr.exe) may allow remote attackers to read or execute arbitrary files via an "http://" or "file://" argument to the topic parameter in an hcp:// URL. NOTE: since the initial report of this problem, several researchers have been unable to reproduce this issue.

VendorProductVersions

n/a

n/a

affected
n/a

References

9621
vdb-entry
x_refsource_BID
winxp-helpctr-hcp-xss(15101)
vdb-entry
x_refsource_XF
20040207 HelpCtr - allow open any page or run
mailing-list
x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now