Microsoft Windows HSC DVD Driver Upgrade Code Execution Vulnerability

Description A security vulnerability has been reported in Microsoft Windows XP and Server 2003 operating systems. This issue exists in the Help and Support Center HSC and is due to how the feature handles HCP invocation URIs for DVD driver upgrades. This issue could be exploited from a malicious...

Microsoft Windows Me and XP Help and Support Center does not adequately validate hcp:// URI parameters

Overview The Help and Support Center included with Microsoft Windows Millennium Edition and XP does not adequately validate parameters provided in an "hcp://" URI. As a result, an attacker could construct a URI that could cause the Help and Support Center to execute arbitrary script, effectively...