Microsoft Help and Support Center Remote Code Execution Vulnerability (2229593)

This host is missing a critical security update according to Microsoft Bulletin MS10-042. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Help and Support Center code execution

Code injection via URL...

Pay Attention to MS10-042 Update

Microsoft has released four new security bulletins in the July 2010 edition of patch Tuesday. These bulletins address five vulnerabilities. It is not uncommon, and has become expected, for a light patch Tuesday to follow a heavy patch Tuesday release from Microsoft. Last month, Microsoft released...

MS Patch Tuesday: Googler Zero-Day Fixed in 33 Days

Last month, when Google researcher Tavis Ormandy released details on a critical Help and Support Center vulnerability that exposed Windows XP and Windows Server 2003 users to malicious hacker attacks, Microsoft was publicly unhappy with the decision. Ormandy claims he spent five days negotiating...

MS10-042: Vulnerability in Help and Support Center Could Allow Remote Code Execution (2229593)

The Windows Help and Support Center does not properly validate HCP URLs, which are associated normally with the Windows Help and Support Center. If an attacker can trick a user on the affected host into viewing a specially crafted web page or clicking on a specially crafted link in an email...

Real Player 12.0.0.879 0day for WinXP

No description provided by source. Exploit Title: Real Player 12.0.0.879 0day for WinXP Date: 09/07/2010 Author: webDEViL Version: 12.0.0.879 Tested on: WinXP This bug utilizes Microsoft Help vuln for RCE. You can test by browsing to http://krash.in/real-exp/exploit.ram...

Real Player 12.0.0.879 - Code Execution

Real Player 12.0.0.879 - Code Execution Exploit Title: Real Player 12.0.0.879 0day for WinXP Date: 09/07/2010 Author: webDEViL Version: 12.0.0.879 Tested on: WinXP This bug utilizes Microsoft Help vuln for RCE. You can test by browsing to http://krash.in/real-exp/exploit.ram...

Real Player 12.0.0.879 - Code Execution

Exploit Title: Real Player 12.0.0.879 0day for WinXP Date: 09/07/2010 Author: webDEViL Version: 12.0.0.879 Tested on: WinXP This bug utilizes Microsoft Help vuln for RCE. You can test by browsing to http://krash.in/real-exp/exploit.ram...

Wiki Web Help 'getpage.php' SQL Injection Vulnerability

Wiki Web Help is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...

Wiki Web Help 0.28 SQL Injection

Version: v0.28 Possible all versions Vendor: Richard Bondi - http://wikiwebhelp.org Download: http://wikiwebhelp.org/release/wwh-0.2.8.zip Description: "The goal of this project is to create a help application that is editable by the community. Standard wiki systems are great for many application...

Wiki Web Help Cross Site Scripting and HTML Injection Vulnerabilities

Wiki Web Help is prone to a cross-site scripting vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code could run in the context of the affected...

WikiWebHelp 0.28 - SQL Injection

Version: v0.28 Possible all versions Vendor: Richard Bondi - http://wikiwebhelp.org Download: http://wikiwebhelp.org/release/wwh-0.2.8.zip Description: "The goal of this project is to create a help application that is editable by the community. Standard wiki systems are great for many application...

Wiki Web Help 0.2.7 Cross Site Scripting

------------------------------------------------------------------------ Software................Wiki Web Help 0.2.7 Vulnerability...........Persistent/Reflected XSS Download................http://sourceforge.net/projects/wwh/ Release Date............7/1/2010 Tested On...............Windows Vista...

Wiki Web Help 0.2.7 Shell Upload

------------------------------------------------------------------------ Software................Wiki Web Help 0.2.7 Vulnerability...........Arbitrary Upload Download................http://sourceforge.net/projects/wwh/ Release Date............7/1/2010 Tested On...............Windows Vista + XAMPP...

Wiki Web Help 0.2.7 cross site scripting

No description provided by source. ------------------------------------------------------------------------ Software................Wiki Web Help 0.2.7 Vulnerability...........Persistent/Reflected XSS Download................http://sourceforge.net/projects/wwh/ Release Date............7/1/2010...

Huge Increase Seen in Attacks on Windows Help Center Flaw

Attackers are ramping up their attempts to exploit the recently disclosed vulnerability in the Windows Help and Support Center in Windows XP. There have been targeted attacks against the flaw for two weeks now, but experts have noticed a major increase in the volume and spread of them in recent...

Microsoft Help Files (.CHM): 'Locked File' Feature Bypass

No description provided by source. Changes made with Windows XP introduced additional origin validation for files downloaded from the Internet when saved to an NTFS volume. This 'feature' is present in Windows XP, Vista and 7. When a user downloads a .CHM file using Internet Explorer or another...

Microsoft Help Files (.CHM): 'Locked File' Feature Bypass

, , . .' '. ', . , '. , ., , / / / ==/ / / / / / / | Y Y / /| / /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. Microsoft Help Files .CHM: 'Locked File' Bypass Versions Affected: Windows XP, Windows Vista, Windows 7 pdf: http://www.security-assessment.com/files/advisories/WindowsLockedHelpFiles.pdf...

Microsoft Help Workshop HPJ OPTIONS Section Buffer Overflow (CVE-2007-0427)

The Microsoft Help Workshop product is a development tool that allows the design and development of help files frequently packaged with Windows based applications. The program is used to author help content and package it in Microsoft Help files such as HLP. There exists a buffer overflow...

MS KB2219475: Windows Help Center hcp:// Protocol Handler Arbitrary Code Execution

If a remote attacker can trick a user on the affected host into accessing a malicious web page containing specially crafted 'hcp://' URLs, an as-yet unpatched vulnerability in Windows Help and Support Center that arises due to its failure to validate URLs that use the HCP protocol could be...