CVE-2002-0974

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 15.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-09-24 · updated 2026-06-16

Description

Help and Support Center for Windows XP allows remote attackers to delete arbitrary files via a link to the hcp: protocol that accesses uplddrvinfo.htm.

Affected products

Microsoft Windows XP Service Pack 3: all versions

References

http://marc.info/?l=bugtraq&m=102942549832077&w=2
http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ328940
http://www.iss.net/security_center/static/9878.php
http://www.osvdb.org/3001
http://www.securityfocus.com/bid/5478
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-060
http://marc.info/?l=bugtraq&m=102942549832077&w=2
http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ328940
http://www.iss.net/security_center/static/9878.php
http://www.osvdb.org/3001
http://www.securityfocus.com/bid/5478
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-060

Get alerted when CVE-2002-0974 or the next vulnerability affects your stack