Simplify your laptop buying
- Quick specs
- Price: Update
- Operating system:
- Date added: February 26, 2003
- Total Downloads: 12
- Downloads last week: 1
- See full specifications
- Average user rating: Be the first to rate this product!
Publisher's description
From Microsoft :Help and Support Center provides a centralized facility through which users can obtain assistance on a variety of topics. For instance, it provides product documentation, assistance in determining hardware compatibility, access to Windows Update, online help from Microsoft, and other assistance. Users and programs can execute URL links to Help and Support Center by using the "hcp://" prefix in a URL link instead of "http://".
A security vulnerability is present in the Windows Me version of Help and Support Center, and results because the URL Handler for the "hcp://" prefix contains an unchecked buffer.
An attacker could exploit the vulnerability by constructing a URL that, when clicked on by the user, would execute code of the attacker?s choice in the Local Computer security context. The URL could be hosted on a web page, or sent directly to the user in email. In the web based scenario, where a user then clicked on the URL hosted on a website, an attacker could have the ability to read or launch files already present on the local machine. In the case of an e-mail borne attack, if the user was using Outlook Express 6.0 or Outlook 2002 in their default configurations, or Outlook 98 or 2000 in conjunction with the Outlook Email Security Update, then an attack could not be automated and the user would still need to click on a URL sent in e-mail. However if the user was not using Outlook Express 6.0 or Outlook 2002 in their default configurations, or Outlook 98 or 2000 in conjunction with the Outlook Email Security Update, the attacker could cause an attack to trigger automatically without the user having to click on a URL contained in an e-mail.
More popular Operating Systems & Updates downloads
- 53,112 downloads 1. CNET TechTracker app
- 21,805 downloads 2. DriverMax
- 7,757 downloads 3. Windows 7 USB/DVD Download Tool
- 5,684 downloads 4. Windows XP Media Center Edition
- 5,568 downloads 5. Windows XP Service Pack 3
- See all Operating Systems & Updates downloads
User reviews
Write your own review Be the first one to review Microsoft Security Bulletin MS03-006 812709 and share your experience with the CNET community!
Submit your review
- See more CNET content tagged:
- Microsoft Outlook,
- Microsoft Outlook 2002,
- Microsoft Outlook 98,
- Microsoft Outlook Express 6.0,
- attacker
