CVE-2003-0009

Cross-site scripting (XSS) vulnerability in Help and Support Center for Microsoft Windows Me allows remote attackers to execute arbitrary script in the Local Computer security context via an hcp:// URL with the malicious script in the topic parameter.

Affected products

Windows Me

Microsoft Windows Me

All versions

Microsoft Windows Xp

All versions

Fix

Available

CVSS 2.0

6.8 MEDIUM

EPSS

16.5% (97th percentile)

NVD status

Modified

Published

2004-09-01