CVE

Id
7731  
CVE No.
CVE-2003-0907  
Status
Candidate  
Description
Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// URL, which are not quoted when constructing the argument list to HelpCtr.exe.  
Phase
Assigned (20031104)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
45734 7731 CVE-2003-0907 FULLDISC:20040413 Microsoft Help and Support Center argument injection vulnerability  View
45735 7731 CVE-2003-0907 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020065.html  View
45736 7731 CVE-2003-0907 BUGTRAQ:20040413 [Full-Disclosure] iDEFENSE Security Advisory 04.13.04 - Microsoft Help and Support  View
45737 7731 CVE-2003-0907 URL:http://marc.info/?l=bugtraq&m=108196864221676&w=2  View
45738 7731 CVE-2003-0907 MISC:http://www.idefense.com/application/poi/display?id=100&type=vulnerabilities  View
45739 7731 CVE-2003-0907 MS:MS04-011  View
45740 7731 CVE-2003-0907 URL:http://www.microsoft.com/technet/security/bulletin/ms04-011.mspx  View
45741 7731 CVE-2003-0907 CERT:TA04-104A  View
45742 7731 CVE-2003-0907 URL:http://www.us-cert.gov/cas/techalerts/TA04-104A.html  View
45743 7731 CVE-2003-0907 CERT-VN:VU#260588  View
45744 7731 CVE-2003-0907 URL:http://www.kb.cert.org/vuls/id/260588  View
45745 7731 CVE-2003-0907 CIAC:O-114  View
45746 7731 CVE-2003-0907 URL:http://www.ciac.org/ciac/bulletins/o-114.shtml  View
45747 7731 CVE-2003-0907 BID:10119  View
45748 7731 CVE-2003-0907 URL:http://www.securityfocus.com/bid/10119  View
45749 7731 CVE-2003-0907 OVAL:oval:org.mitre.oval:def:1000  View
45750 7731 CVE-2003-0907 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1000  View
45751 7731 CVE-2003-0907 OVAL:oval:org.mitre.oval:def:904  View
45752 7731 CVE-2003-0907 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:904  View
45753 7731 CVE-2003-0907 XF:win-hcpurl-code-execution(15704)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62784 JVNDB-2004-000125 Microsoft Windows ユーティリティマネージャのユーザ補助プログラムの起動方法における権限昇格の脆弱性 Microsoft Windows のユーティリティマネージャには、ユーザ補助プログラムの起動方法の不備により、任意のコードを実行される脆弱性が存在します。 CVE-2003-0908 7731 7.2 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000125.html  View