CVE

Id
8627  
CVE No.
CVE-2004-0199  
Status
Candidate  
Description
Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability (dvdupgrd.htm).  
Phase
Assigned (20040311)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
53949 8627 CVE-2004-0199 BUGTRAQ:20040512 MS04-015 - Windows Help Center - Dvdupgrade  View
53950 8627 CVE-2004-0199 URL:http://marc.info/?l=bugtraq&m=108437759930820&w=2  View
53951 8627 CVE-2004-0199 FULLDISC:20040512 MS04-015 - Windows Help Center - Dvdupgrade  View
53952 8627 CVE-2004-0199 URL:http://marc.info/?l=full-disclosure&m=108430407801825&w=2  View
53953 8627 CVE-2004-0199 MISC:http://www.exploitlabs.com/files/advisories/EXPL-A-2004-001-helpctr.txt  View
53954 8627 CVE-2004-0199 MS:MS04-015  View
53955 8627 CVE-2004-0199 URL:http://www.microsoft.com/technet/security/bulletin/MS04-015.mspx  View
53956 8627 CVE-2004-0199 CERT-VN:VU#484814  View
53957 8627 CVE-2004-0199 URL:http://www.kb.cert.org/vuls/id/484814  View
53958 8627 CVE-2004-0199 XF:win-hcp-code-execution(16095)  View
53959 8627 CVE-2004-0199 URL:http://xforce.iss.net/xforce/xfdb/16095  View
53960 8627 CVE-2004-0199 BID:10321  View
53961 8627 CVE-2004-0199 URL:http://www.securityfocus.com/bid/10321  View
53962 8627 CVE-2004-0199 OVAL:oval:org.mitre.oval:def:1008  View
53963 8627 CVE-2004-0199 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1008  View
53964 8627 CVE-2004-0199 OVAL:oval:org.mitre.oval:def:1032  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63038 JVNDB-2004-000380 Microsoft GDI+ の不正な JPEG ファイルの処理によるバッファオーバーフローの脆弱性 Microsoft の各種製品に実装されている GDI+ (GDI: Graphics Device Interface の拡張バージョン ) には、JPEG イメージファイルの処理に対するチェックが不適切であるため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2004-0200 8627 9.3 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000380.html  View