The Microsoft Windows Help and Support Center is a resource in Microsoft Windows operating systems for online help, support, tools, how-to articles, and other resources.
A vulnerability in Windows Help and Support Center allows command execution when a user loads a specially crafted HCP URL resulting in a bypass of the whitelist restrictions provided by the
Apply the fix referenced in Microsoft Security Bulletin 10-042.
Exploit works on Windows XP SP3 and requires a user to open the exploit page in Internet Explorer.
Internet Explorer 8 will pop up security prompts during the exploiting process asking permissions for execution operations. The target user must grant these operations.
Exploit requires the ability to bind to port 69/UDP on the SAINTexploit host.