Description
Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// URL, which are not quoted when constructing the argument list to HelpCtr.exe.
References
- O-114 third-party-advisory government-resource
- VU#260588 third-party-advisory
- 10119 vdb-entry
- oval:org.mitre.oval:def:1000 vdb-entry signature
- MS04-011 vendor-advisory
- oval:org.mitre.oval:def:904 vdb-entry signature
- TA04-104A third-party-advisory
- 20040413 Microsoft Help and Support Center argument injection vulnerability mailing-list
- 20040413 [Full-Disclosure] iDEFENSE Security Advisory 04.13.04 - Microsoft Help and Support mailing-list
- http://www.idefense.com/application/poi/display?id=100&type=vulnerabilities
- win-hcpurl-code-execution(15704) vdb-entry