Lucene search

K
cve[email protected]CVE-2004-0474
HistoryJul 07, 2004 - 4:00 a.m.

CVE-2004-0474

2004-07-0704:00:00
web.nvd.nist.gov
28
cve-2004-0474
help center
helpctr.exe
remote attackers
arbitrary files
url vulnerability
nvd

7.7 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.037 Low

EPSS

Percentile

91.8%

Help Center (HelpCtr.exe) may allow remote attackers to read or execute arbitrary files via an “http://” or “file://” argument to the topic parameter in an hcp:// URL. NOTE: since the initial report of this problem, several researchers have been unable to reproduce this issue.

Affected configurations

NVD
Node
microsoftwindows_xphome
OR
microsoftwindows_xpgoldprofessional
OR
microsoftwindows_xpsp1home

7.7 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.037 Low

EPSS

Percentile

91.8%

Related for CVE-2004-0474