Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// URL, which are not quoted when constructing the argument list to HelpCtr.exe.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Windows Help和Support中心远程命令执行漏洞(MS04-011)
Vulnerability Description
Microsoft XP帮助支持中心(Help and Support Center)是一款统一的帮助和支持服务中心，可把所有的支持服务，如远程协助、自动更新、联机帮助以及其他工具等集中在一个地方。 帮助支持中心由于对HCP URL验证处理不正确，远程攻击者可以利用这个漏洞以进程权限在系统上执行任意代码。 攻击者通过构建恶意HCP URL，诱使用户处理，或发送恶意EMAIL消息诱使用户打开，可导致以进程权限在系统上执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A