Flaw in Windows Me Could Enable Code Execution

By Thomas McGuire on February 26, 2003, 5:15 PM
Help & Support Center provides a centralized facility through which users can obtain assistance on a variety of topics. For instance, it provides product documentation, assistance in determining hardware compatibility, access to Windows Update, online help from Microsoft, & other assistance. Users & programs can execute URL links to Help & Support Center by using the "hcp://" prefix in a URL link instead of "http://". A security vulnerability is present in the Windows Me version of Help & Support Center, & results because the URL Handler for the "hcp://" prefix contains an unchecked buffer.

Affected Software:
Microsoft Windows Me

Patch availability:
Microsoft Windows Me




User Comments: 7

Got something to say? Post a comment
poertner_1274 said:
Wasn't there some sort of problem like this with XP a little while ago? I remember hearing about something quite similar.
TS | Thomas said:
Yup there was. The fix is included with XP Service Pack 1 as far as a I recall.
poertner_1274 said:
Yes I think so. It was pretty bad, because there were quite a few people that knew about it and exploited it BEFORE M$ released the story, and SP1 to fix it.
Vehementi said:
Just what we need, another Windows ME flaw :DI'm surprised they didn't find out about this sooner, with the same thing happening with Windows XP. What's that about?? :confused:
Unregistered said:
Solution, get rid of Windows ME. Has to be the worst OS out of Redmond ever.
Arris said:
[quote][i]Originally posted by Vehementi [/i][b]Just what we need, another Windows ME flaw :DI'm surprised they didn't find out about this sooner, with the same thing happening with Windows XP. What's that about?? :confused: [/b][/quote]Maybe they didn't find out about it because there are only a few owners of typewriters with screens that are actually using ME ;)
poertner_1274 said:
LOL good point. It is kind of the same way as 98 and so on, where M$ is discontinuing help for those OS's, since they are getting outdated, and people should upgrade to XP, etc..
Load all comments...

Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...
Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.