This application requires Javascript for optimal performance.

MS.Windows.XP.HCP.URI.Handler.Arbitrary.Command.Execution

Alias(es)

Windows.XP.HCP.URI.Handler.Arbitrary.Command.Execution

Release Date

Aug 08, 2005

Severity

low

Impact

Compromise of the affected system.

Description

It indicates a possible exploit of Arbitrary Command Execution Vulnerability in Microsoft Windows XP HCP URI Handler.



A vulnerability is reported in Microsoft Windows XP HCP URI Handler that may allow an attacker to execute arbitrary commands on the vulnerable system. This is due to application helpctr.exe failure to sanitize hcp:// URL request. For exploiting this an attacker may by creating a malicious Web page and hosting it on a Web site or by sending it to a victim as an HTML email.



Affected Products

Microsoft Windows XP Professional SP1.

Recommended Actions

Apply appropriate service pack path from the Microsoft.

Coverage

IPS
VCM

Common Vulnerabilities and Exposures (CVE)

CVE-2004-0474

Reference/s

http://www.securityfocus.com/bid/9621 (BugTraq)

Reference: VID-10403