Every CVE Search/ Get API key

CVE-2010-1885

The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows...

9.3 HighPublic exploit

The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server 2003 does not properly handle malformed escape sequences, which allows remote attackers to bypass the trusted documents whitelist (fromHCP option) and execute arbitrary commands via a crafted hcp:// URL, aka "Help Center URL Validation Vulnerability."

Exploit likelihood

71.1%Down 12.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.3

The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server 2003 does not properly handle malformed escape sequences, which allows remote attackers to bypass the trusted documents whitelist (fromHCP option) and execute arbitrary commands via a crafted hcp:// URL, aka "Help Center URL Validation Vulnerability."

Record
CVE-2010-1885
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-78
Updated
2026-11-02
CVE List No score

The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server 2003 does not properly handle malformed escape sequences, which allows remote attackers to bypass the trusted documents whitelist (fromHCP option) and execute arbitrary commands via a crafted hcp:// URL, aka "Help Center URL Validation Vulnerability."

Record
CVE-2010-1885
Updated
2026-11-02
EUVDEUVD-2010-1904 No score

The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server 2003 does not properly handle malformed escape sequences, which allows remote attackers to bypass the trusted documents whitelist (fromHCP option) and execute arbitrary commands via a crafted hcp:// URL, aka "Help Center URL Validation Vulnerability."

Record
EUVD-2010-1904
Updated
2026-11-03
GitHub AdvisoriesGHSA-3qv5-55f8-3w6h No score

The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows...

The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server 2003 does not properly handle malformed escape sequences, which allows remote attackers to bypass the trusted documents whitelist (fromHCP option) and execute arbitrary commands via a crafted hcp:// URL, aka "Help Center URL Validation Vulnerability."

Record
GHSA-3qv5-55f8-3w6h
Weakness
CWE-78
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBMicrosoft Windows Help Centre Handles - Malformed Escape Sequences Incorrectly (MS03-044)2010-06-10
Exploit-DBMicrosoft Help Center - Cross-Site Scripting / Command Execution (MS10-042) (Metasploit)2010-09-20
MetasploitMicrosoft Help Center XSS and Command Execution2010-06-09

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-1885 is a high vulnerability (CVSS 9.3) in Microsoft Windows Server 2003, published June 14, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 71.1%, the 99th percentile. No source names a fixed version.

References

Show 12 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open