NVD

Id
73995  
Name
CVE-2003-0907  
Description
Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// URL, which are not quoted when constructing the argument list to HelpCtr.exe.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-06-01  
Modified Date
2017-07-10  
Seq
2003-0907  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
380422 73995 CVE-2003-0907 20040413 Microsoft Help and Support Center argument injection vulnerability  View
380423 73995 CVE-2003-0907 20040413 [Full-Disclosure] iDEFENSE Security Advisory 04.13.04 - Microsoft Help and Support  View
380424 73995 CVE-2003-0907 oval:org.mitre.oval:def:1000  View
380425 73995 CVE-2003-0907 oval:org.mitre.oval:def:904  View
380426 73995 CVE-2003-0907 O-114  View
380427 73995 CVE-2003-0907 http://www.idefense.com/application/poi/display?id=100&type=vulnerabilities  View
380428 73995 CVE-2003-0907 VU#260588  View
380429 73995 CVE-2003-0907 MS04-011  View
380430 73995 CVE-2003-0907 10119  View
380431 73995 CVE-2003-0907 TA04-104A  View
380432 73995 CVE-2003-0907 win-hcpurl-code-execution(15704)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62783 JVNDB-2004-000124 Microsoft Windows の不正な HCP URL よる任意のコードを実行される脆弱性 Microsoft Windows の 「 ヘルプとサポート 」 機能には HCP URL の妥当性の確認が適切に行われていない脆弱性が存在します。 CVE-2003-0907 7730 CVE-2003-0907 73995 5.1 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000124.html 2004-04-13 2007-04-01 View