Microsoft Windows Help and Support Center URI processing vulnerability

🗓️ 10 Jun 2010 00:00:00Reported by CERTType

The Microsoft Windows Help and Support Center URI processing vulnerability allows remote attackers to execute arbitrary commands by manipulating `hcp://` URIs, leveraging a XSS vulnerability, and injecting script commands into a Help and Support Center session. An update is available from Microsoft

Source	Link
microsoft	www.microsoft.com/technet/security/Bulletin/MS10-042.mspx
seclists	www.seclists.org/fulldisclosure/2010/Jun/205
microsoft	www.microsoft.com/technet/security/advisory/2219475.mspx
blogs	www.blogs.technet.com/b/msrc/archive/2010/06/10/windows-help-vulnerability-disclosure.aspx
blogs	www.blogs.technet.com/b/srd/archive/2010/06/10/help-and-support-center-vulnerability-full-disclosure-posting.aspx
technet	www.technet.microsoft.com/en-us/library/bb490918.aspx
msdn	www.msdn.microsoft.com/en-us/library/bb773791%28VS.85%29.aspx
secunia	www.secunia.com/advisories/40076
theregister	www.theregister.co.uk/2010/06/10/windows_help_bug/

13 Jul 2010 18:40Current

7High risk

Vulners AI Score7