← All CVEs

CVE-2010-0917

high · 7.6

Stack-based buffer overflow in VBScript in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, might allow user-assisted remote attackers to execute arbitrary code via a long string in the fourth argument (aka helpfile argument) to the MsgBox function, leading to code execution when the F1 key is pressed, a different vulnerability than CVE-2010-0483.

7.6
CVSS
24.3%
EPSS (exploit prob.)
98th
EPSS percentile
2010-03-03
Published

AV:N/AC:H/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

VendorProductAffected versions
microsoftwindows_2000all versions
microsoftwindows_2003_serverall versions
microsoftwindows_2003_serverall versions
microsoftwindows_server_2003all versions
microsoftwindows_xpall versions
microsoftwindows_xpall versions
microsoftwindows_xpall versions
microsoftinternet_explorer6
microsoftinternet_explorer7
microsoftinternet_explorer8

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2010-0917