CVE-2004-0474: Help Center (HelpCtr.exe) may allow remote attackers to read or execute arbitrary files via an "http://" or...

Security readout for executives and security teams

This old Help Center issue describes a way a remote attacker might make HelpCtr.exe read or execute arbitrary files through a crafted hcp:// URL. The record has no severity score, no named affected versions, and notes that several researchers could not reproduce it. Exposure is unclear from the bundled data. It is most relevant to legacy systems where Help Center/HelpCtr.exe and hcp:// URL handling are present. The affected product and versions are not normalized in the CVE bundle. Treat as a legacy-system hygiene issue unless asset discovery finds exposed unsupported systems. Business urgency depends on whether old Help Center protocol handling still exists in the environment. Mitigation focus: Check vendor guidance and historical Microsoft advisories before making control changes.; Inventory legacy endpoints where HelpCtr.exe and hcp:// handling remain enabled.; Prioritize retirement, isolation, or strict browsing controls for unsupported legacy Windows systems..

Prepared

Jun 30, 2026, 05:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.