NVD

Id
12036  
Name
CVE-2010-0483  
Description
vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute arbitrary code by referencing a (1) local pathname, (2) UNC share pathname, or (3) WebDAV server with a crafted .hlp file in the fourth argument (aka helpfile argument) to the MsgBox function, leading to code execution involving winhlp32.exe when the F1 key is pressed, aka "VBScript Help Keypress Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
7.6  
Severity
High  
CVSS Base Score
7.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-03-03  
Modified Date
2010-08-21  
Seq
2010-0483  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
66399 12036 CVE-2010-0483 http://blogs.technet.com/msrc/archive/2010/02/28/investigating-a-new-win32hlp-and-internet-explorer-issue.aspx  View
66400 12036 CVE-2010-0483 http://blogs.technet.com/msrc/archive/2010/03/01/security-advisory-981169-released.aspx  View
66401 12036 CVE-2010-0483 http://blogs.technet.com/srd/archive/2010/03/01/help-keypress-vulnerability-in-vbscript-enabling-remote-code-execution.aspx  View
66402 12036 CVE-2010-0483 http://isec.pl/vulnerabilities/isec-0027-msgbox-helpfile-ie.txt  View
66403 12036 CVE-2010-0483 http://isec.pl/vulnerabilities10.html  View
66404 12036 CVE-2010-0483 oval:org.mitre.oval:def:7170  View
66405 12036 CVE-2010-0483 oval:org.mitre.oval:def:8654  View
66406 12036 CVE-2010-0483 1023668  View
66407 12036 CVE-2010-0483 http://www.computerworld.com/s/article/9163298/New_zero_day_involves_IE_puts_Windows_XP_users_at_risk  View
66408 12036 CVE-2010-0483 VU#612021  View
66409 12036 CVE-2010-0483 http://www.microsoft.com/technet/security/advisory/981169.mspx  View
66410 12036 CVE-2010-0483 MS10-022  View
66411 12036 CVE-2010-0483 38463  View
66412 12036 CVE-2010-0483 http://www.theregister.co.uk/2010/03/01/ie_code_execution_bug/  View
66413 12036 CVE-2010-0483 TA10-103A  View
66414 12036 CVE-2010-0483 ADV-2010-0485  View
66415 12036 CVE-2010-0483 ms-win-msgbox-code-execution(56558)  View
66416 12036 CVE-2010-0483 https://www.metasploit.com/svn/framework3/trunk/modules/exploits/windows/browser/ie_winhlp32.rb  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35376 JVNDB-2010-001156 Internet Explorer において VBScript および Windows Help を使用する際に任意のコードが実行される脆弱性 Microsoft Internet Explorer において VBScript および Windows Help を使用する際に、任意のコードが実行される脆弱性が存在します。 CVE-2010-0483 43063 CVE-2010-0483 12036 7.6 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001156.html 2010-03-02 2010-05-12 View