Remote code execution in Windows Help and Support Center (helpctr.exe) on Windows XP and Server 2003 allows unauthenticated attackers to bypass URL validation and execute arbitrary commands via crafted hcp:// URLs. The MPC::HexToNum function fails to properly validate escape sequences, enabling attackers to circumvent the trusted documents whitelist. EPSS indicates 92.20% exploitation probability with publicly available exploit code. Microsoft addressed this via MS10-042 in July 2010 after public disclosure in June 2010.
Command Injection
Microsoft
NVD
Exploit-DB
CVSS 2.0
9.3
EPSS
92.2%
Threat
8.1