NVD

Id
70910  
Name
CVE-2004-0474  
Description
Help Center (HelpCtr.exe) may allow remote attackers to read or execute arbitrary files via an "http://" or "file://" argument to the topic parameter in an hcp:// URL. NOTE: since the initial report of this problem, several researchers have been unable to reproduce this issue.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-07-07  
Modified Date
2017-07-10  
Seq
2004-0474  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
365910 70910 CVE-2004-0474 20040210 Re: HelpCtr - allow open any page or run  View
365911 70910 CVE-2004-0474 20040210 Re: HelpCtr - allow open any page or run  View
365912 70910 CVE-2004-0474 20040213 Re: HelpCtr - allow open any page or run  View
365913 70910 CVE-2004-0474 20040211 Re: HelpCtr - allow open any page or run  View
365914 70910 CVE-2004-0474 20040207 HelpCtr - allow open any page or run  View
365915 70910 CVE-2004-0474 9621  View
365916 70910 CVE-2004-0474 winxp-helpctr-hcp-xss(15101)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63862 JVNDB-2002-000189 Microsoft Windows の HelpCtr.exe における任意のファイルを読み込むおよび実行される脆弱性 ------------ CVE-2004-0474 8901 CVE-2004-0474 70910 5.1 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000189.html 2002-08-15 2007-04-01 View