Technical Documentation

Security Center

Microsoft Security Bulletins: Prior Updates May 2004


May 2004

Microsoft Security Bulletin MS04-015

Vulnerability in Help and Support Center Could Allow Remote Code Execution (840374)

Severity: Important
Vulnerabilities:
  • Help and Support Center Vulnerability - CAN-2004-0199
    A remote code execution vulnerability exists in the Help and Support Center because of the way that it handles HCP URL validation. An attacker could exploit the vulnerability by constructing a malicious HCP URL that could potentially allow remote code execution if a user visited a malicious Web site or viewed a malicious e-mail message. An attacker who successfully exploited this vulnerability could take complete control of an affected system. However, significant user interaction is required to exploit this vulnerability.