CVE-2010-2265 Cross-site scripting (XSS) vulnerability in the GetServerName function in sysinfo/commonFunc.js in Microsoft Windows Help and Support Center for Windows XP and Windows Server 2003 allows remote attack...
MediumCVSS 4.3
EPSS 21.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in the GetServerName function in sysinfo/commonFunc.js in Microsoft Windows Help and Support Center for Windows XP and Windows Server 2003 allows remote attackers to inject arbitrary web script or HTML via the svr parameter to sysinfo/sysinfomain.htm. NOTE: this can be leveraged with CVE-2010-1885 to execute arbitrary commands without user interaction.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2003 server | All versions | No fix listed |
| Microsoft windows server 2003 | All versions | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- 20100609 Microsoft Windows Help Centre Handles Malformed Escape Sequences Incorrectly exploit mailing-list
- blogs.technet.com vendor-advisory
- blogs.technet.com vendor-advisory
- 40076 third-party-advisory vendor-advisory
- VU#578319 third-party-advisory us-government-resource
- www.microsoft.com vendor-advisory
- 20100609 Microsoft Windows Help Centre Handles Malformed Escape Sequences Incorrectly mailing-list
- 40721 exploit vdb-entry
- ADV-2010-1417 vdb-entry vendor-advisory
- ms-win-helpctr-command-execution(59267) vdb-entry