Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute arbitrary code by referencing a (1) local pathname, (2) UNC share pathname, or (3) WebDAV server with a crafted .hlp file in the fourth argument (aka helpfile argument) to the MsgBox function, leading to code execution involving winhlp32.exe when the F1 key is pressed, aka "VBScript Help Keypress Vulnerability."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Internet Explorer winhlp32.exe服务远程代码执行漏洞
Vulnerability Description
Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 Microsoft Internet Explorer支持使用VBScript，多个VBScript命令允许指定HelpFile参数，如MsgBox函数，这个参数指向本地文件系统的某个文件或远程应用通过windows文件共享的文件。当F1按下去的时候，Internet Explorer会启动Windows帮助(winhlp32.exe)并显示指定的上下文敏感的帮助文件。由于windows帮助文件.HLP是不安全文件，可被
CVSS Information
N/A
Vulnerability Type
N/A