NVD

Id
13377  
Name
CVE-2010-1885  
Description
The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server 2003 does not properly handle malformed escape sequences, which allows remote attackers to bypass the trusted documents whitelist (fromHCP option) and execute arbitrary commands via a crafted hcp:// URL, aka "Help Center URL Validation Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-06-15  
Modified Date
2010-09-17  
Seq
2010-1885  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
74063 13377 CVE-2010-1885 20100609 Microsoft Windows Help Centre Handles Malformed Escape Sequences Incorrectly  View
74064 13377 CVE-2010-1885 http://blogs.technet.com/b/msrc/archive/2010/06/10/windows-help-vulnerability-disclosure.aspx  View
74065 13377 CVE-2010-1885 http://blogs.technet.com/b/srd/archive/2010/06/10/help-and-support-center-vulnerability-full-disclosure-posting.aspx  View
74066 13377 CVE-2010-1885 oval:org.mitre.oval:def:11733  View
74067 13377 CVE-2010-1885 13808  View
74068 13377 CVE-2010-1885 VU#578319  View
74069 13377 CVE-2010-1885 http://www.microsoft.com/technet/security/advisory/2219475.mspx  View
74070 13377 CVE-2010-1885 MS10-042  View
74071 13377 CVE-2010-1885 20100609 Microsoft Windows Help Centre Handles Malformed Escape Sequences Incorrectly  View
74072 13377 CVE-2010-1885 20100610 Re: Microsoft Windows Help Centre Handles Malformed Escape Sequences Incorrectly  View
74073 13377 CVE-2010-1885 40725  View
74074 13377 CVE-2010-1885 1024084  View
74075 13377 CVE-2010-1885 TA10-194A  View
74076 13377 CVE-2010-1885 ADV-2010-1417  View
74077 13377 CVE-2010-1885 ms-win-helpctr-command-execution(59267)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35834 JVNDB-2010-001614 Microsoft Windows Help and Support Center に脆弱性 Microsoft Windows の Help and Support Center には、hcp:// URI の処理に起因する脆弱性が存在します。 CVE-2010-1885 44465 CVE-2010-1885 13377 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001614.html 2010-06-10 2010-07-23 View