VDB
CVE-2004-0199
CVE-2004-0199
PUBLISHED
CVSS 5.099999904632568 MEDIUM
Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability (dvdupgrd.htm).
EPSS 43.51% · 97.6th percentile
Risk Scores
CVSS 2.0
5.099999904632568
EPSS Score
43.51%
97.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| microsoft | windows_2003_server | *, enterprise, enterprise_64-bit |
| n/a | n/a | * |
| microsoft | windows_xp |
Timeline
- May 14, 2004 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- Apr 21, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
- Sep 8, 2023 EPSS Score
- Oct 30, 2023 EPSS Score
References
- MS04-015 vendor-advisory
- 20040512 MS04-015 - Windows Help Center - Dvdupgrade mailing-list
- win-hcp-code-execution(16095) vdb
- 10321 vdb
- oval:org.mitre.oval:def:1008 vdb
- oval:org.mitre.oval:def:1032 vdb
- http://www.exploitlabs.com/files/advisories/EXPL-A-2004-001-helpctr.txt url
- 20040512 MS04-015 - Windows Help Center - Dvdupgrade mailing-list
- VU#484814 third-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2004-0199 advisory