|
|
|
|
| |
Credit:
The original article can be found at: http://www.microsoft.com/technet/security/Bulletin/MS10-042.mspx
|
| |
Vulnerable Systems:
* Microsoft Windows XP SP2
* Microsoft Windows XP SP3
* Microsoft Windows XP Professional x64 Edition SP2
* Microsoft Windows Server 2003 SP2
* Microsoft Windows Server 2003 x64 Edition SP2
* Microsoft Windows Server 2003 SP2 for Itanium-based Systems
A previously public (June 10, 2010) remote code execution vulnerability affects the Microsoft Help and Support centre due to how it handles the HCP protocol in specially crafted URIs. An attacker can exploit this issue by tricking an unsuspecting victim into viewing a web page containing specially malformed content. A successful exploit will result in the execution of arbitrary attacker-supplied code in the context of the currently logged-in user.
Patch Availability:
Microsoft has released a patch to address this vulnerability under MS10-042. For more information please refer to:
http://www.microsoft.com/technet/security/Bulletin/MS10-042.mspx
CVE Information:
CVE-2010-1885
Disclosure Timeline:
13 Jul 2010 - Published
|
|
|
|
|
