Windows Help and Support Center -FromHCP URL whitelist bypass

Added: 06/15/2010
CVE: CVE-2010-1885
BID: 40725
OSVDB: 65264


The Microsoft Windows Help and Support Center is a resource in Microsoft Windows operating systems for online help, support, tools, how-to articles, and other resources.


A vulnerability in Windows Help and Support Center allows command execution when a user loads a specially crafted HCP URL resulting in a bypass of the whitelist restrictions provided by the -FromHCP option.


Apply the fix referenced in Microsoft Security Bulletin 10-042.



Exploit works on Windows XP SP3 and requires a user to open the exploit page in Internet Explorer.

Internet Explorer 8 will pop up security prompts during the exploiting process asking permissions for execution operations. The target user must grant these operations.

Exploit requires the ability to bind to port 69/UDP on the SAINTexploit host.


Windows XP

Back to exploit index