Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-2265
HistoryJun 15, 2010 - 2:04 p.m.

CVE-2010-2265

2010-06-1514:04:24
CWE-79
[email protected]
web.nvd.nist.gov
6

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.1

Confidence

High

EPSS

0.974

Percentile

99.9%

JSON

Cross-site scripting (XSS) vulnerability in the GetServerName function in sysinfo/commonFunc.js in Microsoft Windows Help and Support Center for Windows XP and Windows Server 2003 allows remote attackers to inject arbitrary web script or HTML via the svr parameter to sysinfo/sysinfomain.htm. NOTE: this can be leveraged with CVE-2010-1885 to execute arbitrary commands without user interaction.

Affected configurations

Nvd
Node
microsoftwindows_2003_serversp2
OR
microsoftwindows_2003_serversp2itanium
OR
microsoftwindows_server_2003sp2
OR
microsoftwindows_xpsp2
OR
microsoftwindows_xpsp3
OR
microsoftwindows_xpMatch-sp2x64

Related

openvas 4
prion 2
cve 2
nessus 2
cvelist 2
saint 4
securityvulns 2
packetstorm 2
metasploit 1
seebug 1
nvd 1
threatpost 6
canvas 1
checkpoint_advisories 1
exploitdb 1
thn 1
openvas
openvas
Microsoft Windows Help and Support Center RCE Vulnerability
2010-06-11 00:00:00
MS Windows Help and Support Center Remote Code Execution Vulnerability
2010-06-11 00:00:00
Microsoft Help and Support Center Remote Code Execution Vulnerability (2229593)
2010-07-14 00:00:00
prion
prion
Cross site scripting
2010-06-15 14:04:00
Input validation
2010-06-15 14:04:00
cve
cve
CVE-2010-2265
2010-06-15 14:04:24
CVE-2010-1885
2010-06-15 14:04:23
nessus
nessus
MS KB2219475: Windows Help Center hcp:// Protocol Handler Arbitrary Code Execution
2010-06-18 00:00:00
MS10-042: Vulnerability in Help and Support Center Could Allow Remote Code Execution (2229593)
2010-07-13 00:00:00
cvelist
cvelist
CVE-2010-2265
2010-06-14 18:00:00
CVE-2010-1885
2010-06-14 18:00:00
saint
saint
Windows Help and Support Center -FromHCP URL whitelist bypass
2010-06-15 00:00:00
Windows Help and Support Center -FromHCP URL whitelist bypass
2010-06-15 00:00:00
Windows Help and Support Center -FromHCP URL whitelist bypass
2010-06-15 00:00:00
securityvulns
securityvulns
Microsoft Windows Help and Support Center code execution
2010-07-14 00:00:00
Microsoft Security Bulletin MS10-042 - Critical Vulnerability in Help and Support Center Could Allow Remote Code Execution (2229593)
2010-07-14 00:00:00
packetstorm
packetstorm
Microsoft Help Center XSS and Command Execution
2010-06-15 00:00:00
Microsoft Help Center XSS and Command Execution
2010-07-14 00:00:00
metasploit
metasploit
Microsoft Help Center XSS and Command Execution
2010-07-13 19:30:47
seebug
seebug
Microsoft WindowsๅธฎๅŠฉๅ’Œๆ”ฏๆŒไธญๅฟƒ็ป•่ฟ‡็™ฝๅๅ•้™ๅˆถๆผๆดž
2010-06-12 00:00:00
nvd
nvd
CVE-2010-1885
2010-06-15 14:04:23
threatpost
threatpost
Researchers Ponder When to Notify Users of Public Vulnerability Exploits
2013-10-02 10:04:52
Huge Increase Seen in Attacks on Windows Help Center Flaw
2010-07-01 11:15:39
Microsoft: 25,000 Computers Attacked With Latest Windows Zero Day
2010-07-14 16:25:37
canvas
canvas
Immunity Canvas: IE_HCP
2010-06-15 14:04:00
checkpoint_advisories
checkpoint_advisories
Internet Explorer Windows Help and Support Center Remote Code Execution (CVE-2010-1885)
2010-06-13 00:00:00
exploitdb
exploitdb
Microsoft Help Center - Cross-Site Scripting / Command Execution (MS10-042) (Metasploit)
2010-09-20 00:00:00
thn
thn
Phoenix Exploit's Kit 2.8 mini version
2011-10-12 17:41:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.1

Confidence

High

EPSS

0.974

Percentile

99.9%

JSON
Related for NVD:CVE-2010-2265
openvas4prion2cve2nessus2cvelist2saint4securityvulns2packetstorm2metasploit1seebug1nvd1threatpost6canvas1checkpoint_advisories1exploitdb1thn1