Microsoft Windows Help Centre Handles - Malformed Escape Sequences Incorrectly (MS03-044)

CVE编号

CVE-2010-1885

利用情况

暂无

补丁情况

N/A

披露时间

2010-06-16

漏洞描述

The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server 2003 does not properly handle malformed escape sequences, which allows remote attackers to bypass the trusted documents whitelist (fromHCP option) and execute arbitrary commands via a crafted hcp:// URL, aka "Help Center URL Validation Vulnerability."

解决建议

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
http://archives.neohapsis.com/archives/fulldisclosure/2010-06/0197.html
http://blogs.technet.com/b/msrc/archive/2010/06/10/windows-help-vulnerability...
http://blogs.technet.com/b/srd/archive/2010/06/10/help-and-support-center-vul...
http://secunia.com/advisories/40076
http://www.exploit-db.com/exploits/13808
http://www.kb.cert.org/vuls/id/578319
http://www.microsoft.com/technet/security/advisory/2219475.mspx
http://www.securityfocus.com/archive/1/511774/100/0/threaded
http://www.securityfocus.com/archive/1/511783/100/0/threaded
http://www.securityfocus.com/bid/40725
http://www.securitytracker.com/id?1024084
http://www.us-cert.gov/cas/techalerts/TA10-194A.html
http://www.vupen.com/english/advisories/2010/1417
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-042
https://exchange.xforce.ibmcloud.com/vulnerabilities/59267
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...

受影响软件情况

#	类型	厂商	产品	版本	影响面
1
	运行在以下环境
	系统	microsoft	windows_2003_server	*	-
	运行在以下环境
	系统	microsoft	windows_server_2003	*	-
	运行在以下环境
	系统	microsoft	windows_xp	*	-
	运行在以下环境
	系统	microsoft	windows_xp	-	-
查看完整数据

CVSS3评分 9.3

• 攻击路径 网络
• 攻击复杂度 N/A
• 权限要求 无
• 影响范围 N/A
• 用户交互 需要
• 可用性 完全地
• 保密性 完全地
• 完整性 完全地

AV:N/AC:M/Au:N/C:C/I:C/A:C CWE-ID 漏洞类型 CWE-78 OS命令中使用的特殊元素转义处理不恰当（OS命令注入）