CVE-2010-0483
60Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendepss 86%
de la publicación al arma0 días
Publicada en NVD3 mar
1ª PoC2 mar
metasploit26 feb
probabilidad de explotación
86%top 1% de las CVE
explotación observada
noninguna fuente lo reporta
2 exploit(s) público(s)
vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute arbitrary code by referencing a (1) local pathname, (2) UNC share pathname, or (3) WebDAV server with a crafted .hlp file in the fourth argument (aka helpfile argument) to the MsgBox function, leading to code execution involving winhlp32.exe when the F1 key is pressed, aka "VBScript Help Keypress Vulnerability."
Productos afectados
n/a · n/aPoCs públicas encontradas — 2
exploitdbwww.exploit-db.com/exploits/16541no verificadoexploitdbwww.exploit-db.com/exploits/11615no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
http://blogs.technet.com/msrc/archive/2010/02/28/investigating-a-new-win32hlp-and-internet-explorer-issue.aspxhttp://blogs.technet.com/msrc/archive/2010/03/01/security-advisory-981169-released.aspxhttp://blogs.technet.com/srd/archive/2010/03/01/help-keypress-vulnerability-in-vbscript-enabling-remote-code-execution.aspxhttp://isec.pl/vulnerabilities10.htmlhttp://isec.pl/vulnerabilities/isec-0027-msgbox-helpfile-ie.txthttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-022http://secunia.com/advisories/38727http://securitytracker.com/id?1023668https://exchange.xforce.ibmcloud.com/vulnerabilities/56558https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7170https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8654https://www.metasploit.com/svn/framework3/trunk/modules/exploits/windows/browser/ie_winhlp32.rb