{"uuid": "6818dbfb-e67e-4452-923e-ba7c35bd9467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0483", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms10_022_ie_vbscript_winhlp32.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Maurycy Prodeus\", \"jduck \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a code execution vulnerability that occurs when a user\\n          presses F1 on MessageBox originated from VBscript within a web page. When the\\n          user hits F1, the MessageBox help functionality will attempt to load and use\\n          a HLP file from an SMB or WebDAV (if the WebDAV redirector is enabled) server.\\n\\n          This particular version of the exploit implements a WebDAV server that will\\n          serve HLP file as well as a payload EXE. During testing warnings about the\\n          payload EXE being unsigned were witnessed. A future version of this module\\n          might use other methods that do not create such a warning.\", \"disclosure_date\": \"2010-02-26\", \"fullname\": \"exploit/windows/browser/ms10_022_ie_vbscript_winhlp32\", \"is_install_path\": true, \"mod_time\": \"2026-03-11 21:31:08 +0000\", \"name\": \"MS10-022 Microsoft Internet Explorer Winhlp32.exe MsgBox Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/ms10_022_ie_vbscript_winhlp32.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"windows/browser/ms10_022_ie_vbscript_winhlp32\", \"references\": [\"CVE-2010-0483\", \"OSVDB-62632\", \"MSB-MS10-022\", \"URL-https://blogs.technet.com/msrc/archive/2010/02/28/investigating-a-new-win32hlp-and-internet-explorer-issue.aspx\", \"URL-https://isec.pl/vulnerabilities/isec-0027-msgbox-helpfile-ie.txt\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Automatic\", \"Internet Explorer on Windows\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:09.109820Z"}