CVE-2010-1885
CVE-2010-1885
Vexday Risk Score
82Fix now
SSVC decision (CISA)
Act
Exploitation + impact → act immediately
Exploit maturity
Functional exploit
Automatable exploit available (Nuclei/Metasploit).
CVSS —EPSS 75.5%KEV nãoPoC públicaNuclei —Metasploit simPatch referenciado
Lifecycle
09 Jun 2010Metasploit module available
10 Jun 2010Public PoC
14 Jun 2010Published on NVD
Recommendation: Patch as soon as possible — active exploitation confirmed.
The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server 2003 does not properly handle malformed escape sequences, which allows remote attackers to bypass the trusted documents whitelist (fromHCP option) and execute arbitrary commands via a crafted hcp:// URL, aka "Help Center URL Validation Vulnerability."
Affected products
n/a · n/apublic PoCs found — 3
cve_referencewww.exploit-db.com/exploits/13808unverifiedexploitdbwww.exploit-db.com/exploits/16545unverifiedexploitdbwww.exploit-db.com/exploits/13808unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://archives.neohapsis.com/archives/fulldisclosure/2010-06/0197.htmlhttp://blogs.technet.com/b/msrc/archive/2010/06/10/windows-help-vulnerability-disclosure.aspxhttp://blogs.technet.com/b/srd/archive/2010/06/10/help-and-support-center-vulnerability-full-disclosure-posting.aspxhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-042http://secunia.com/advisories/40076https://exchange.xforce.ibmcloud.com/vulnerabilities/59267https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11733http://www.exploit-db.com/exploits/13808http://www.kb.cert.org/vuls/id/578319http://www.microsoft.com/technet/security/advisory/2219475.mspxhttp://www.securityfocus.com/archive/1/511774/100/0/threadedhttp://www.securityfocus.com/archive/1/511783/100/0/threaded