CVEvulnerability
CVE-2004-0420
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-07-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by spoofing the type of a file via a CLSID specifier in the filename, as demonstrated using Internet Explorer 6.0.2800.1106 on Windows XP.
Affected configurations
• microsoft ie 6.0
• microsoft internet explorer 6.0
• microsoft internet explorer 6.0.2800.1106
References
- http://secunia.com/advisories/10736/ secunia.com
- http://www.kb.cert.org/vuls/id/106324 US Government Resource
- http://www.security-express.com/archives/bugtraq/2004-01/0300.html www.security-express.com
- http://www.securityfocus.com/archive/1/351379 Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/9510 Exploit, Vendor Advisory
- http://www.us-cert.gov/cas/techalerts/TA04-196A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-024 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14964 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2245 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2381 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2894 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3386 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3533 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3604 oval.cisecurity.org
- http://secunia.com/advisories/10736/ secunia.com
- http://www.kb.cert.org/vuls/id/106324 US Government Resource
- http://www.security-express.com/archives/bugtraq/2004-01/0300.html www.security-express.com
- http://www.securityfocus.com/archive/1/351379 Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/9510 Exploit, Vendor Advisory
- http://www.us-cert.gov/cas/techalerts/TA04-196A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-024 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14964 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2245 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2381 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2894 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3386 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3533 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3604 oval.cisecurity.org