ID CVE-2002-0974
Summary Help and Support Center for Windows XP allows remote attackers to delete arbitrary files via a link to the hcp: protocol that accesses uplddrvinfo.htm.
References
Vulnerable Configurations
  • cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 12-10-2018 - 21:31)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:P/A:N
refmap via4
bid 5478
bugtraq 20020815 Delete arbitrary files using Help and Support Center [MSRC 1198dg]
mskb Q328940
osvdb 3001
xf winxp-helpctr-delete-files(9878)
Last major update 12-10-2018 - 21:31
Published 24-09-2002 - 04:00
Last modified 12-10-2018 - 21:31
Back to Top