NVD

Id
70652  
Name
CVE-2004-0199  
Description
Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability (dvdupgrd.htm).  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-06-14  
Modified Date
2017-07-10  
Seq
2004-0199  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
364431 70652 CVE-2004-0199 20040512 MS04-015 - Windows Help Center - Dvdupgrade  View
364432 70652 CVE-2004-0199 20040512 MS04-015 - Windows Help Center - Dvdupgrade  View
364433 70652 CVE-2004-0199 oval:org.mitre.oval:def:1008  View
364434 70652 CVE-2004-0199 oval:org.mitre.oval:def:1032  View
364435 70652 CVE-2004-0199 http://www.exploitlabs.com/files/advisories/EXPL-A-2004-001-helpctr.txt  View
364436 70652 CVE-2004-0199 VU#484814  View
364437 70652 CVE-2004-0199 MS04-015  View
364438 70652 CVE-2004-0199 10321  View
364439 70652 CVE-2004-0199 win-hcp-code-execution(16095)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62840 JVNDB-2004-000182 Microsoft Windows のヘルプとサポート機能における任意のコードを実行される脆弱性 Microsoft Windows の「ヘルプとサポート」機能には、HCP URL の妥当性の確認が適切に行われていない脆弱性が存在します。 CVE-2004-0199 8626 CVE-2004-0199 70652 5.1 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000182.html 2004-05-11 2007-04-01 View