Vulnerability Description
vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute arbitrary code by referencing a (1) local pathname, (2) UNC share pathname, or (3) WebDAV server with a crafted .hlp file in the fourth argument (aka helpfile argument) to the MsgBox function, leading to code execution involving winhlp32.exe when the F1 key is pressed, aka "VBScript Help Keypress Vulnerability."
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows 2000 | All versions |
| Microsoft | Windows 2003 Server | All versions |
| Microsoft | Windows Server 2003 | All versions |
| Microsoft | Windows Xp | All versions |
| Microsoft | Internet Explorer | 6 |
Related Weaknesses (CWE)
References
- http://blogs.technet.com/msrc/archive/2010/02/28/investigating-a-new-win32hlp-anVendor Advisory
- http://blogs.technet.com/msrc/archive/2010/03/01/security-advisory-981169-releasVendor Advisory
- http://blogs.technet.com/srd/archive/2010/03/01/help-keypress-vulnerability-in-vVendor Advisory
- http://isec.pl/vulnerabilities/isec-0027-msgbox-helpfile-ie.txtExploit
- http://isec.pl/vulnerabilities10.htmlExploit
- http://secunia.com/advisories/38727Vendor Advisory
- http://securitytracker.com/id?1023668
- http://www.computerworld.com/s/article/9163298/New_zero_day_involves_IE_puts_Win
- http://www.kb.cert.org/vuls/id/612021US Government Resource
- http://www.microsoft.com/technet/security/advisory/981169.mspxVendor Advisory
- http://www.osvdb.org/62632
- http://www.securityfocus.com/bid/38463Exploit
- http://www.theregister.co.uk/2010/03/01/ie_code_execution_bug/
- http://www.us-cert.gov/cas/techalerts/TA10-103A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2010/0485Vendor Advisory
FAQ
What is CVE-2010-0483?
CVE-2010-0483 is a vulnerability with a CVSS score of 7.6 (HIGH). vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute arb...
How severe is CVE-2010-0483?
CVE-2010-0483 has been rated HIGH with a CVSS base score of 7.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2010-0483?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Windows 2000, Microsoft Windows 2003 Server, Microsoft Windows Server 2003, Microsoft Windows Xp, Microsoft Internet Explorer.