CVE-2003-0009

Cross-site scripting (XSS) vulnerability in Help and Support Center for Microsoft Windows Me allows remote attackers to execute arbitrary script in the Local Computer security context via an hcp:// URL with the malicious script in the topic parameter.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

16.48% chance of exploitation in the next 30 days, 97th percentile

Published

2004-09-01

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/22289

References

• CVE Record
• NVD entry

Related

• CVE-2003-0004
• CVE-2003-0015
• CVE-2003-0003
• CVE-2003-0019
• CVE-2003-0002
• CVE-2003-0027