exploits , vulnerabilities , articles , Microsoft Windows XP Help And Support Center Interface Spoofing Weakness

Title	Microsoft Windows XP Help And Support Center Interface Spoofing Weakness
Published	2004-02-17-12:00AM
Updated	2004-02-17-11:55PM
Class	Design Error
CVE	CVE-MAP-NOMATCH
Remote	Yes
Local	No
Credit	Discovery of this issue is credited to Bartosz Kwitkowski <bartosz@wb.pl>.
Vulnerable	Microsoft Windows XP Professional SP1 Microsoft Windows XP Professional Microsoft Windows XP Home SP1 Microsoft Windows XP Home
Not Vulnerable
Code	The following example was provided: hcp://system/errors/Connection.htm?online_url=http://wb.pl/bartosz/hcp/screen2.jpg&topic_title=Windows Update&topic_intro=Please click below to check your system&offline_url=c:/ A screenshot of the spoofed interface is also available at the following location: http://wb.pl/bartosz/hcp/screen3.jpg
TXT

Vulnerabilities - newest 10 RSS | More

• 2008-12-04 Rae Media Web Based Contact Management Login SQL Injection Vulnerability
• 2008-12-04 Nagios External Commands and Adaptive Commands Unspecified Vulnerability
• 2008-12-04 Z1Exchange SQL Injection and Cross Site Scripting Vulnerabilities
• 2008-12-04 mvnForum Cross Site Scripting Vulnerability
• 2008-12-04 i-Net Solution Orkut Clone SQL Injection and Cross Site Scripting Vulnerabilities
• 2008-12-04 Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities
• 2008-12-04 Jbook SQL Injection Vulnerability
• 2008-12-04 SquirrelMail Malformed HTML Mail Message HTML Injection Vulnerability
• 2008-12-04 HP-UX Unspecified Local Denial Of Service Vulnerability
• 2008-12-04 Netrw Vim Script Information Disclosure Vulnerability

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Fri, 05 Dec 2008 17:12:44 +0000