CVE-2001-0909

Buffer overflow in helpctr.exe program in Microsoft Help Center for Windows XP allows remote attackers to execute arbitrary code via a long hcp: URL...

CVE-2001-0909: Undefined Security Weakness

Buffer overflow in helpctr.exe program in Microsoft Help Center for Windows XP allows remote attackers to execute arbitrary code via a long hcp: URL...

Help Center Live < 2.1.0 osTicket Multiple SQL Injection

Binary data 3521.prm...

CVE-2004-0474

Help Center HelpCtr.exe may allow remote attackers to read or execute arbitrary files via an "http://" or "file://" argument to the topic parameter in an hcp:// URL. NOTE: since the initial report of this problem, several researchers have been unable to reproduce this issue...

CVE-2004-0474

Help Center HelpCtr.exe may allow remote attackers to read or execute arbitrary files via an "http://" or "file://" argument to the topic parameter in an hcp:// URL. NOTE: since the initial report of this problem, several researchers have been unable to reproduce this issue...

CVE-2004-0474

CVE-2004-0474 affects Help Center (HelpCtr.exe). A remote attacker can supply an http:// or file:// URL as the topic parameter in an hcp:// URL to read or execute arbitrary files. The provided documents do not specify affected versions, exploitation status, or remediation steps.

CVE-2004-0474: Undefined Security Weakness

Help Center HelpCtr.exe may allow remote attackers to read or execute arbitrary files via an "http://" or "file://" argument to the topic parameter in an hcp:// URL. NOTE: since the initial report of this problem, several researchers have been unable to reproduce this issue...

Windows Help Center Dvdupgrade code execution

It's possible to execute any code via local zone scripting...

[Full-Disclosure] MS04-015 - Windows Help Center - Dvdupgrade

------------------------------------------------------------ - EXPL-A-2003-027 exploitlabs.com Advisory 027 - ------------------------------------------------------------ - Windows Help Center - Dvdupgrade - OVERVIEW ======== "Help and Support Center HSC is a feature in Windows that provides help...

Microsoft Help and Support Center (HCP) fails to properly validate HCP URLs

Overview The Microsoft Help and Support Center HCP fails to properly handle HCP URL validation. Exploitation of this vulnerability may permit remote attackers to execute arbitrary code on the system with the privileges of the current user. Description Microsoft Windows XP and Server 2003 Help and...

MS04-015: Microsoft Help Center Remote Code Execution (840374)

The remote host contains bugs in the Microsoft Help and Support Center in the way it handles HCP URL validation. 840374 An attacker could use this bug to execute arbitrary commands on the remote host. To exploit this bug, an attacker would need to lure a user of the remote host into visiting a...

CVE-2003-0907

Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// URL, which are not quoted when constructing the argument list to HelpCtr.exe...

Microsoft Window ME Help Center buffer overflow

Buffer overflow during hcp:// URL processing...

Security Bulletin MS02-060: Flaw in Windows XP Help and Support Center Could Enable File Deletion &#40;Q328940&#41;

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Flaw in Windows XP Help and Support Center Could Enable File Deletion Q328940 Date: 16 October 2002 Software: Microsoft Windows XP Impact: Delete files on the user's system Max Risk:...

File deletion via Windows XP Help Center

By usgin hcp:// URL it's possible to remove file sustem objects...

Microsoft Windows XP2000NT 4.0 - Help Facility ActiveX Control Buffer Overflow

Microsoft Windows XP2000NT 4.0 - Help Facility ActiveX Control Buffer Overflow // source: https://www.securityfocus.com/bid/5874/info The ActiveX control that provides much of the functionality for the Windows Help Center contains an unchecked buffer. Successful exploitation could result in...

Microsoft Windows XP/2000/NT 4.0 - Help Facility ActiveX Control Buffer Overflow

// source: https://www.securityfocus.com/bid/5874/info The ActiveX control that provides much of the functionality for the Windows Help Center contains an unchecked buffer. Successful exploitation could result in execution of arbitrary code in the security context of the current user. / By...

Delete arbitrary files using Help and Support Center [MSRC 1198dg]

MS Tracking ID: MSRC 1198dg Date Reported: 25/06/02 Date Published: 15/08/02 Vendor: Microsoft Impact: Delete files through CSS condition in Help Center Resolution: To be fixed in XP SP1 Tested Applications: IE6 + all service packs to date of publishing Windows XP + all patches to date of...