CVE-2004-0474: Microsoft Windows XP

Medium severity, CVSS 5.1. EPSS: 16.2% chance of exploitation in the next 30 days.

Help Center (HelpCtr.exe) may allow remote attackers to read or execute arbitrary files via an "http://" or "file://" argument to the topic parameter in an hcp:// URL. NOTE: since the initial report of this problem, several researchers have been unable to reproduce this issue.

Affected products

• Microsoft Windows XP: any version

Published 2004-07-07. Last modified 2026-06-16.