PT-2010-3851 · Microsoft · Windows Help/Support Center+2

Tavis Ormandy · Published 2010-06-14 · Updated 2019-02-26 · CVE-2010-2265

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows Help and Support Center versions for Windows XP and Windows Server 2003

Description A cross-site scripting (XSS) issue exists in the GetServerName function, allowing remote attackers to inject arbitrary web script or HTML via the svr parameter to "sysinfo/sysinfomain.htm". This can potentially be used to execute arbitrary commands without user interaction when combined with other vulnerabilities.

Recommendations For Microsoft Windows Help and Support Center versions for Windows XP and Windows Server 2003, consider restricting access to the "sysinfo/sysinfomain.htm" endpoint until a fix is available. As a temporary workaround, avoid using the svr parameter in the affected API endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2010-2265

Affected Products

Windows Help/Support Center

Windows Server 2003

Windows Xp

References · 12

• 🔥 http://securityfocus.com/bid/40721 · Exploit
• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2010-06/0197.html · Exploit
• 🔥 https://exploit-db.com/exploits/34126 · Exploit
• http://secunia.com/advisories/40076 · Vendor Advisory
• http://microsoft.com/technet/security/advisory/2219475.mspx · Vendor Advisory
• http://blogs.technet.com/b/srd/archive/2010/06/10/help-and-support-center-vulnerability-full-disclosure-posting.aspx · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2265 · Security Note
• http://blogs.technet.com/b/msrc/archive/2010/06/10/windows-help-vulnerability-disclosure.aspx · Vendor Advisory
• http://vupen.com/english/advisories/2010/1417 · Vendor Advisory
• http://securityfocus.com/archive/1/511774/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59267 · Note
• http://kb.cert.org/vuls/id/578319 · Note