CVE-2010-0483

Published: Mar 3, 2010Modified: Apr 29, 2026

7.6

Vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Exploitability: 4.9 / Impact: 10.0

Source: NVD

Description

vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute arbitrary code by referencing a (1) local pathname, (2) UNC share pathname, or (3) WebDAV server with a crafted .hlp file in the fourth argument (aka helpfile argument) to the MsgBox function, leading to code execution involving winhlp32.exe when the F1 key is pressed, aka "VBScript Help Keypress Vulnerability."

Affected (7)

Products: Microsoft: Windows 2000, Windows 2003 Server, Windows Server 2003, Windows Xp

4 products

Windows 2003 Server

Windows Server 2003

Configuration A

7 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Microsoft Windows 2000	All versions
Microsoft Windows 2003 Server	All versions
Microsoft Windows 2003 Server	All versions
Microsoft Windows Server 2003	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions

Running on/with	Platform Versions
Microsoft Internet Explorer	Version 6
Microsoft Internet Explorer	Version 7
Microsoft Internet Explorer	Version 8

Related CWEs

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (40)

http://blogs.technet.com/msrc/archive/2010/02/28/investigating-a-new-win32hlp-and-internet-explorer-issue.aspx

Source: secure@microsoft.com

Vendor Advisory

http://blogs.technet.com/msrc/archive/2010/03/01/security-advisory-981169-released.aspx

Source: secure@microsoft.com

Vendor Advisory

http://blogs.technet.com/srd/archive/2010/03/01/help-keypress-vulnerability-in-vbscript-enabling-remote-code-execution.aspx

Source: secure@microsoft.com

Vendor Advisory

http://isec.pl/vulnerabilities/isec-0027-msgbox-helpfile-ie.txt

Source: secure@microsoft.com

Exploit

http://isec.pl/vulnerabilities10.html

Source: secure@microsoft.com

Exploit

http://secunia.com/advisories/38727

Source: secure@microsoft.com

Vendor Advisory

http://securitytracker.com/id?1023668

Source: secure@microsoft.com

http://www.computerworld.com/s/article/9163298/New_zero_day_involves_IE_puts_Windows_XP_users_at_risk

Source: secure@microsoft.com

http://www.kb.cert.org/vuls/id/612021

Source: secure@microsoft.com

US Government Resource

http://www.microsoft.com/technet/security/advisory/981169.mspx

Source: secure@microsoft.com

Vendor Advisory

http://www.osvdb.org/62632

Source: secure@microsoft.com

http://www.securityfocus.com/bid/38463

Source: secure@microsoft.com

Exploit

http://www.theregister.co.uk/2010/03/01/ie_code_execution_bug/

Source: secure@microsoft.com

http://www.us-cert.gov/cas/techalerts/TA10-103A.html

Source: secure@microsoft.com

US Government Resource

http://www.vupen.com/english/advisories/2010/0485

Source: secure@microsoft.com

Vendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-022

Source: secure@microsoft.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/56558

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7170

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8654

Source: secure@microsoft.com

https://www.metasploit.com/svn/framework3/trunk/modules/exploits/windows/browser/ie_winhlp32.rb

Source: secure@microsoft.com

Exploit

http://blogs.technet.com/msrc/archive/2010/02/28/investigating-a-new-win32hlp-and-internet-explorer-issue.aspx

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://blogs.technet.com/msrc/archive/2010/03/01/security-advisory-981169-released.aspx

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://blogs.technet.com/srd/archive/2010/03/01/help-keypress-vulnerability-in-vbscript-enabling-remote-code-execution.aspx

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://isec.pl/vulnerabilities/isec-0027-msgbox-helpfile-ie.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://isec.pl/vulnerabilities10.html

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://secunia.com/advisories/38727

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securitytracker.com/id?1023668

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.computerworld.com/s/article/9163298/New_zero_day_involves_IE_puts_Windows_XP_users_at_risk

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/612021

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.microsoft.com/technet/security/advisory/981169.mspx

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.osvdb.org/62632

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/38463

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.theregister.co.uk/2010/03/01/ie_code_execution_bug/

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA10-103A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2010/0485

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-022

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/56558

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7170

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8654

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.metasploit.com/svn/framework3/trunk/modules/exploits/windows/browser/ie_winhlp32.rb

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.