medium6.8Public exploit code
CVE-2003-0009
Cross-site scripting (XSS) vulnerability in Help and Support Center for Microsoft Windows Me allows remote attackers to execute arbitrary script in the Local C…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows XP/ME - Help and Support Center Buffer Overflow2003-02-26 · remote · windows · Verified
Impact
Cross-site scripting (XSS) vulnerability in Help and Support Center for Microsoft Windows Me allows remote attackers to execute arbitrary script in the Local Computer security context via an hcp:// URL with the malicious script in the topic parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows Me | All versions |
| Microsoft | Windows Xp | All versions |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=104636383018686&w=2
- http://www.ciac.org/ciac/bulletins/n-047.shtml
- http://www.iss.net/security_center/static/11425.php
- http://www.kb.cert.org/vuls/id/489721
- http://www.osvdb.org/6074
- http://www.securityfocus.com/bid/6966
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-006