CVEvulnerability

CVE-2004-0199

5.1 MEDIUM Published 2004-06-14 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-06-14
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P

Description

Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability (dvdupgrd.htm).

Affected configurations

• microsoft windows 2003 server enterprise • microsoft windows 2003 server enterprise 64-bit • microsoft windows 2003 server r2 • microsoft windows 2003 server standard • microsoft windows 2003 server web • microsoft windows xp

References