CVE-2010-0917

CVE-2010-0917 describes a stack-based buffer overflow in VBScript within specific versions of Microsoft Windows (2000, XP, Server 2003) when Internet Explorer is in use. This vulnerability could allow user-assisted remote attackers to execute arbitrary code by supplying a long string to the MsgBox function's helpfile argument, triggering code execution upon pressing the F1 key. With a CVSS score of 7.6, it presents a high severity risk due to its network attack vector, high attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high risk score and potential impact, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.