CVE-2003-0907
- State
- Published
- Severity
- Not scored
- Published
- Apr 16, 2004
- Updated
- Aug 8, 2024
- Reserved
- Nov 4, 2003
Description
Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// URL, which are not quoted when constructing the argument list to HelpCtr.exe.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- O-114third-party-advisorygovernment-resource
- VU#260588third-party-advisory
- 10119vdb-entry
- oval:org.mitre.oval:def:1000vdb-entrysignature
- MS04-011vendor-advisory
- oval:org.mitre.oval:def:904vdb-entrysignature
- TA04-104Athird-party-advisory
- 20040413 Microsoft Help and Support Center argument injection vulnerabilitymailing-list
- 20040413 [Full-Disclosure] iDEFENSE Security Advisory 04.13.04 - Microsoft Help and Supportmailing-list
- http://www.idefense.com/application/poi/display?id=100&type=vulnerabilities
- win-hcpurl-code-execution(15704)vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.