Help and Support Center for Windows XP allows remote malicious users to delete arbitrary files via a link to the hcp: protocol that accesses uplddrvinfo.htm.
source: wwwsecurityfocuscom/bid/5478/info
Microsoft Internet Explorer on Windows XP comes equipped with a protocol handler for the 'Help and Support Center' application The protocol handler may be specified in links, and when such a link is submitted by the browser, the Help and Control Center will load an appropriate page However, it h ...