CVE ID:	CVE-2010-0483
Description:	vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute arbitrary code by referencing a (1) local pathname, (2) UNC share pathname, or (3) WebDAV server with a crafted .hlp file in the fourth argument (aka helpfile argument) to the MsgBox function, leading to code execution involving winhlp32.exe when the F1 key is pressed, aka "VBScript Help Keypress Vulnerability."
Test IDs:	1.3.6.1.4.1.25623.1.0.902159   1.3.6.1.4.1.25623.1.0.800482
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0483 BugTraq ID: 38463 http://www.securityfocus.com/bid/38463 Cert/CC Advisory: TA10-103A http://www.us-cert.gov/cas/techalerts/TA10-103A.html CERT/CC vulnerability note: VU#612021 http://www.kb.cert.org/vuls/id/612021 http://isec.pl/vulnerabilities/isec-0027-msgbox-helpfile-ie.txt http://isec.pl/vulnerabilities10.html http://www.computerworld.com/s/article/9163298/New_zero_day_involves_IE_puts_Windows_XP_users_at_risk http://www.theregister.co.uk/2010/03/01/ie_code_execution_bug/ https://www.metasploit.com/svn/framework3/trunk/modules/exploits/windows/browser/ie_winhlp32.rb Microsoft Security Bulletin: MS10-022 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-022 http://www.osvdb.org/62632 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7170 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8654 http://securitytracker.com/id?1023668 http://secunia.com/advisories/38727 http://www.vupen.com/english/advisories/2010/0485 XForce ISS Database: ms-win-msgbox-code-execution(56558) https://exchange.xforce.ibmcloud.com/vulnerabilities/56558