CVE-2004-0474 in Windows
Summary
Help Center (HelpCtr.exe) may allow remote attackers to read or execute arbitrary files via an "http://" or "file://" argument to the topic parameter in an hcp:// URL. NOTE: since the initial report of this problem, several researchers have been unable to reproduce this issue.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
05/14/2004
Disclosure
07/07/2004
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 21926 | Microsoft Windows Help Center HelpCtr.exe Remote Code Execution | Proof-of-Concept | Official fix | CVE-2004-0474 |