CVE-2003-0907
NoneCVSS
—
EPSS
21.9%
Published
Jun 1, 2004
CISA due date
—
The record
Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// URL, which are not quoted when constructing the argument list to HelpCtr.exe.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-79675 NLTK before 3.10.3 fails to validate JVM options passed through the per-call options… CWE-88
- CVE-2026-78676 GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during… CWE-88
- CVE-2026-78678 GitPython versions before 3.1.59 contain an incomplete denylist in the… CWE-88
- CVE-2026-76219 GitPython versions before 3.1.58 contain an arbitrary file overwrite vulnerability in… CWE-88
- CVE-2026-76218 GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that… CWE-88
- CVE-2026-76220 GitPython before 3.1.58 contains a command execution vulnerability in the… CWE-88
- CVE-2026-73624 GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the… CWE-88
- CVE-2026-73621 GitPython before 3.1.56 contains an argument injection vulnerability in the… CWE-88