| Definition Id: oval:org.mitre.oval:def:904 |
Version: 2
Last Modified: 2006-08-28
|
| Title: |
Windows Server 2003 Help Center Command Insertion Vulnerability |
| Description: |
Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// URL, which are not quoted when constructing the argument list to HelpCtr.exe. |
| Family: |
windows |
Class: |
vulnerability |
| Status: |
ACCEPTED |
Reference(s): |
CVE-2003-0907
|
| Platform(s): |
Microsoft Windows Server 2003 |
Product(s): |
Help and Support Center (HSC) |
| Definition Synopsis: |
- Software section
- AND Configuration section
|
