CVE-2010-1885

The CVE-2010-1885 entry concerns the Windows Help and Support Center (HelpCtr) in Windows XP and Windows Server 2003. The vulnerability stems from the MPC::HexToNum function in helpctr.exe failing to properly handle malformed escape sequences, allowing a crafted hcp:// URL to bypass the trusted d...

CVE-2010-2265

CVE-2010-2265 is an XSS in the GetServerName function of sysinfo/commonFunc.js within Windows Help and Support Center on Windows XP and Windows Server 2003, exploitable via svr in sysinfo/sysinfomain.htm. It is paired with CVE-2010-1885, which covers HCP URL handling and can enable command execut...

Internet Explorer Windows Help and Support Center Remote Code Execution (CVE-2010-1885)

The Help and Support Center HSC is a feature in Windows that provides help on a variety of topics. HSC enables users to learn about Windows features, download and install software updates, get assistance from Microsoft and so forth. A remote attacker could exploit this issue by convincing a user ...

CVE-2010-1885

creationtimestamp| type| source ---|---|--- 2010-06-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/13808 2010-09-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16545 2018-05-29 15:50:33+00:00| seen|...

PHP 4.x < 4.4.5, 5.x < 5.2.1 Multiple Integer Overflow Vulnerabilities

PHP is prone to multiple integer overflow vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescriptio...

Debian DSA-1885-1 : xulrunner - several vulnerabilities

Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications, such as the Iceweasel web browser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-3070 Jesse Ruderman discovered crashes in the layout...

openSUSE 10 Security Update : Xerces-c (Xerces-c-6430)

The Xerces-c package was vulnerable to various bugs while parsing XML. CVE-2009-1885 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update Xerces-c-6430. The text description of this plugin is C SUS...

Debian: Security Advisory (DSA-1885-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE Security Summary SUSE-SR:2009:014

The remote host is missing updates announced in advisory SUSE-SR:2009:014. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...

Fedora Core 10 FEDORA-2009-8350 (xerces-c)

The remote host is missing an update to xerces-c announced via advisory FEDORA-2009-8350. OpenVAS Vulnerability Test $Id: fcore20098350.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8350 xerces-c Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 11 FEDORA-2009-8332 (xerces-c27)

The remote host is missing an update to xerces-c27 announced via advisory FEDORA-2009-8332. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Mandrake Security Advisory MDVSA-2009:223 (xerces-c)

The remote host is missing an update to xerces-c announced via advisory MDVSA-2009:223. OpenVAS Vulnerability Test $Id: mdksa2009223.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:223 xerces-c Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

Fedora Core 10 FEDORA-2009-8305 (xerces-c27)

The remote host is missing an update to xerces-c27 announced via advisory FEDORA-2009-8305. OpenVAS Vulnerability Test $Id: fcore20098305.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8305 xerces-c27 Authors: Thomas Reinke Copyright: Copyright c...

Fedora Core 10 FEDORA-2009-8305 (xerces-c27)

The remote host is missing an update to xerces-c27 announced via advisory FEDORA-2009-8305. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Fedora Core 11 FEDORA-2009-8345 (xerces-c)

The remote host is missing an update to xerces-c announced via advisory FEDORA-2009-8345. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Core 10 FEDORA-2009-8350 (xerces-c)

The remote host is missing an update to xerces-c announced via advisory FEDORA-2009-8350. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Core 11 FEDORA-2009-8332 (xerces-c27)

The remote host is missing an update to xerces-c27 announced via advisory FEDORA-2009-8332. OpenVAS Vulnerability Test $Id: fcore20098332.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8332 xerces-c27 Authors: Thomas Reinke Copyright: Copyright c...

Fedora Core 11 FEDORA-2009-8345 (xerces-c)

The remote host is missing an update to xerces-c announced via advisory FEDORA-2009-8345. OpenVAS Vulnerability Test $Id: fcore20098345.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8345 xerces-c Authors: Thomas Reinke Copyright: Copyright c 2009...

[ MDVSA-2009:223 ] xerces-c

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:223 http://www.mandriva.com/security/ Package : xerces-c Date : August 30, 2009 Affected: 2008.1, 2009.0, 2009.1, Enterprise Server 5.0 Problem Description: A vulnerability has been found and corrected in...

Fedora 11 : xerces-c-2.8.0-5.fc11 (2009-8345)

This update fixes : - Bug 515515 - CVE-2009-1885 xerces-c, xerces-c27: Stack overflow when parsing recursive XML structures Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...