Increase in attacks on CVE-2010-1885
Summary: Microsoft warned of an increase in attacks against a zero-day vulnerability in Microsoft Help and Support Center, caused by an error when invalid hexadecimal characters are used in the search topic parameter of a URI, which can bypass command-line restrictions to load arbitrary help documents. Proof-of-concept code has been available since at least mid-June and has been proven to work on Windows XP and Windows Server 2003, with no patch available at the time.
Why it matters: With no patch available, the interim fix is to unregister the HCP protocol, which breaks every local link using hcp://, including links in the Control Panel - a trade-off security leaders have to weigh while proof-of-concept code circulates publicly.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2010-1885
- Related
- Quick analysis of a webpage leveraging CVE-2010-1885 (aka the help and support center vulnerability) Cyber Risks ·Special Delivery -- Phoenix Exploit Kit Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026