CVE-2010-0483

Exp

vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute arbitrary code by referencing a (1) local pathname, (2) UNC share pathname, or (3) WebDAV server with a crafted .hlp file in the fourth argument (aka helpfile argument) to the MsgBox function, leading to code execution involving winhlp32.exe when the F1 key is pressed, aka "VBScript Help Keypress Vulnerability."

Published: 2010-03-03 Last update: 2026-04-29 Assigner: [email protected] Source: [email protected]

Conclusion & alert: CVE-2010-0483 is rated High Exploit Risk (83.5/100): CVSS High severity, with high exploitation likelihood (EPSS 86.25%, 100th percentile). Core evidence: 6 public exploit reference(s) are indexed (Exploit-DB). EPSS rose +3.17% over the last day, indicating growing attacker interest. Mandatory action: Public exploits are available—assess exposure, apply mitigations, and prioritize patching.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Public exploit references (Exploit-DB) for CVE-2010-0483

EDB-ID Source Kind Published Link
16541 exploit_db edb 2010-09-28 Exploit-DB ↗
11615 exploit_db edb 2010-03-02 Exploit-DB ↗
nvd_ref exploit_tag Exploit-DB ↗
nvd_ref exploit_tag Exploit-DB ↗
nvd_ref exploit_tag Exploit-DB ↗
nvd_ref exploit_tag Exploit-DB ↗

Exploit prediction scoring system (EPSS) score for CVE-2010-0483

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-06-15 83.08% 86.25% +3.17%
2 2026-05-20 81.96% 83.08% +1.11%
3 2025-12-28 81.96%

Full EPSS history (16 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2010-0483

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
7.6 2.0 HIGH
AV:N/AC:H/Au:N/C:C/I:C/A:C Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:H)
Exploitation requires uncommon or highly specific conditions.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:C)
Complete confidentiality impact.
Integrity impact (I:C)
Complete integrity impact.
Availability impact (A:C)
Complete availability impact.
4.9 10.0 [email protected]

Weakness enumeration for CVE-2010-0483

Affected software / configurations for CVE-2010-0483

Vendor Product Version Raw CPE
microsoft windows_2000 cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
microsoft windows_2003_server cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*
microsoft windows_2003_server cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*
microsoft windows_server_2003 cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
microsoft windows_xp cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
microsoft windows_xp cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*
microsoft windows_xp cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*

References for CVE-2010-0483

URL Tags
http://blogs.technet.com/msrc/archive/2010/02/28/investigating-a-new-win32hlp-and-internet-explorer-issue.aspx Vendor Advisory
http://blogs.technet.com/msrc/archive/2010/03/01/security-advisory-981169-released.aspx Vendor Advisory
http://blogs.technet.com/srd/archive/2010/03/01/help-keypress-vulnerability-in-vbscript-enabling-remote-code-execution.aspx Vendor Advisory
http://isec.pl/vulnerabilities/isec-0027-msgbox-helpfile-ie.txt Exploit
http://isec.pl/vulnerabilities10.html Exploit
http://secunia.com/advisories/38727 Vendor Advisory
http://securitytracker.com/id?1023668
http://www.computerworld.com/s/article/9163298/New_zero_day_involves_IE_puts_Windows_XP_users_at_risk
http://www.kb.cert.org/vuls/id/612021 US Government Resource
http://www.microsoft.com/technet/security/advisory/981169.mspx Vendor Advisory
http://www.osvdb.org/62632
http://www.securityfocus.com/bid/38463 Exploit
http://www.theregister.co.uk/2010/03/01/ie_code_execution_bug/
http://www.us-cert.gov/cas/techalerts/TA10-103A.html US Government Resource
http://www.vupen.com/english/advisories/2010/0485 Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-022
https://exchange.xforce.ibmcloud.com/vulnerabilities/56558
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7170
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8654
https://www.metasploit.com/svn/framework3/trunk/modules/exploits/windows/browser/ie_winhlp32.rb Exploit
cvelogic Threat Intelligence