CVE-2010-1885

This Metasploit module exploits CVE-2010-1885, a vulnerability in Microsoft Help Center that allows arbitrary command execution via a combination of XSS and improper input validation in the hcp:// protocol handler. It uses a multi-stage attack involving WebDAV, ASX files, and JavaScript to trigger payload execution.

The writeup details a vulnerability in Microsoft Windows Help Centre (CVE-2010-1885) where malformed escape sequences in hcp:// URLs bypass the whitelist due to an error in MPC::HexToNum(). This allows arbitrary help document access and potential XSS exploitation via sysinfomain.htm.

This Metasploit module exploits CVE-2010-1885, a vulnerability in Microsoft Help Center that allows arbitrary command execution via a combination of XSS and improper input validation in the 'hcp://' protocol handler. It sets up an HTTP server to deliver a malicious payload through crafted ASX and HTML files, targeting Internet Explorer and Windows Media Player.