CVE-2004-0474
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2004-0474
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Help Center (HelpCtr.exe) may allow remote attackers to read or execute arbitrary files via an "http://" or "file://" argument to the topic parameter in an hcp:// URL. NOTE: since the initial report of this problem, several researchers have been unable to reproduce this issue.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft Windows XP HCP URI Handler任意命令执行漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Help Center (HelpCtr.exe)存在漏洞。远程攻击者借助 “http://”或者“file://”参数到主题参数hcp:// URL读取或者执行任意文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2004-0474
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2004-0474
请登录查看更多情报信息。
- http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0440.htmlmailing-listx_refsource_FULLDISC
- http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0450.htmlmailing-listx_refsource_FULLDISC
- http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0688.htmlmailing-listx_refsource_FULLDISC
- https://nvd.nist.gov/vuln/detail/CVE-2004-0474
Same Patch Batch · n/a · 2004-05-20 · 18 CVEs total
| CVE-2004-0470 | BEA WebLogic Server 和WebLogic Express漏洞 | |
| CVE-2004-0484 | Microsoft Internet Explorer 安全漏洞 | |
| CVE-2004-0483 | SGI IRIX rpc.mountd远程拒绝服务漏洞 | |
| CVE-2004-0482 | OpenBSD多重整数溢出漏洞 | |
| CVE-2004-0479 | Microsoft Internet Explorer http-equiv Meta标记拒绝服务漏洞 | |
| CVE-2004-0478 | Mozilla漏洞 | |
| CVE-2004-0475 | Microsoft Internet Explorer双反斜线CHM文件执行漏洞 | |
| CVE-2004-0473 | Opera Software Opera 参数参数注入漏洞 | |
| CVE-2004-0471 | BEA WebLogic服务器和WebLogic Express漏洞 | |
| CVE-2002-1580 | Cyrus IMAPD Pre-Login堆破坏漏洞 | |
| CVE-2004-0459 | IEEE 802.11无线协议漏洞 | |
| CVE-2004-0445 | Symantec Client Firewall远程域名服务器响应服务拒绝漏洞 | |
| CVE-2004-0444 | Symantec Client Firewall NETBIOS处理远程堆溢出漏洞 | |
| CVE-2004-0411 | KDE Konqueror 输入验证错误漏洞 | |
| CVE-2004-0398 | Neon WebDAV客户端库缓冲区错误漏洞 | |
| CVE-2004-0396 | CVS多次Entry已被修改或未被修改标记插入操作堆溢出漏洞 | |
| CVE-2003-1041 | Microsoft Internet Explorer 安全漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2004-0474
No comments yet