Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2010-1885

The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server 2003 does not properly handle malformed escape sequences, which allows remote attackers to bypass the trusted documents whitelist (fromHCP option) and execute arbitrary commands via a crafted hcp:// URL, aka "Help Center URL Validation Vulnerability."

Published

2010-06-15T14:04:23.530

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.6

Impact Score

10.0

Weaknesses

Type: Primary
CWE-78

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	microsoft	windows_2003_server	*	Yes
Operating System	microsoft	windows_2003_server	*	Yes
Operating System	microsoft	windows_server_2003	*	Yes
Operating System	microsoft	windows_xp	*	Yes
Operating System	microsoft	windows_xp	*	Yes
Operating System	microsoft	windows_xp	-	Yes

References

http://archives.neohapsis.com/archives/fulldisclosure/2010-06/0197.html Exploit ([email protected])
http://blogs.technet.com/b/msrc/archive/2010/06/10/windows-help-vulnerability-disclosure.aspx ([email protected])
http://blogs.technet.com/b/srd/archive/2010/06/10/help-and-support-center-vulnerability-full-disclosure-posting.aspx Vendor Advisory ([email protected])
http://secunia.com/advisories/40076 Vendor Advisory ([email protected])
http://www.exploit-db.com/exploits/13808 ([email protected])
http://www.kb.cert.org/vuls/id/578319 US Government Resource ([email protected])
http://www.microsoft.com/technet/security/advisory/2219475.mspx Vendor Advisory ([email protected])
http://www.securityfocus.com/archive/1/511774/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/511783/100/0/threaded ([email protected])
http://www.securityfocus.com/bid/40725 Exploit ([email protected])
http://www.securitytracker.com/id?1024084 ([email protected])
http://www.us-cert.gov/cas/techalerts/TA10-194A.html US Government Resource ([email protected])
http://www.vupen.com/english/advisories/2010/1417 Vendor Advisory ([email protected])
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-042 ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/59267 ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11733 ([email protected])
http://archives.neohapsis.com/archives/fulldisclosure/2010-06/0197.html Exploit (af854a3a-2127-422b-91ae-364da2661108)
http://blogs.technet.com/b/msrc/archive/2010/06/10/windows-help-vulnerability-disclosure.aspx (af854a3a-2127-422b-91ae-364da2661108)
http://blogs.technet.com/b/srd/archive/2010/06/10/help-and-support-center-vulnerability-full-disclosure-posting.aspx Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/40076 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.exploit-db.com/exploits/13808 (af854a3a-2127-422b-91ae-364da2661108)
http://www.kb.cert.org/vuls/id/578319 US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.microsoft.com/technet/security/advisory/2219475.mspx Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/511774/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/511783/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/40725 Exploit (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1024084 (af854a3a-2127-422b-91ae-364da2661108)
http://www.us-cert.gov/cas/techalerts/TA10-194A.html US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2010/1417 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-042 (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/59267 (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11733 (af854a3a-2127-422b-91ae-364da2661108)