CVE

Id
8848  
CVE No.
CVE-2004-0420  
Status
Candidate  
Description
The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by spoofing the type of a file via a CLSID specifier in the filename, as demonstrated using Internet Explorer 6.0.2800.1106 on Windows XP.  
Phase
Assigned (20040419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
56261 8848 CVE-2004-0420 BUGTRAQ:20040127 GOOROO CROSSING: File Spoofing Internet Explorer 6  View
56262 8848 CVE-2004-0420 URL:http://www.securityfocus.com/archive/1/351379  View
56263 8848 CVE-2004-0420 BUGTRAQ:20040127 RE: GOOROO CROSSING: File Spoofing Internet Explorer 6  View
56264 8848 CVE-2004-0420 URL:http://www.security-express.com/archives/bugtraq/2004-01/0300.html  View
56265 8848 CVE-2004-0420 MS:MS04-024  View
56266 8848 CVE-2004-0420 URL:http://www.microsoft.com/technet/security/bulletin/ms04-024.asp  View
56267 8848 CVE-2004-0420 CERT:TA04-196A  View
56268 8848 CVE-2004-0420 URL:http://www.us-cert.gov/cas/techalerts/TA04-196A.html  View
56269 8848 CVE-2004-0420 CERT-VN:VU#106324  View
56270 8848 CVE-2004-0420 URL:http://www.kb.cert.org/vuls/id/106324  View
56271 8848 CVE-2004-0420 BID:9510  View
56272 8848 CVE-2004-0420 URL:http://www.securityfocus.com/bid/9510  View
56273 8848 CVE-2004-0420 OVAL:oval:org.mitre.oval:def:2245  View
56274 8848 CVE-2004-0420 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2245  View
56275 8848 CVE-2004-0420 OVAL:oval:org.mitre.oval:def:2381  View
56276 8848 CVE-2004-0420 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2381  View
56277 8848 CVE-2004-0420 OVAL:oval:org.mitre.oval:def:2894  View
56278 8848 CVE-2004-0420 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2894  View
56279 8848 CVE-2004-0420 OVAL:oval:org.mitre.oval:def:3533  View
56280 8848 CVE-2004-0420 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:3533  View
56281 8848 CVE-2004-0420 OVAL:oval:org.mitre.oval:def:3386  View
56282 8848 CVE-2004-0420 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:3386  View
56283 8848 CVE-2004-0420 OVAL:oval:org.mitre.oval:def:3604  View
56284 8848 CVE-2004-0420 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:3604  View
56285 8848 CVE-2004-0420 SECUNIA:10736  View
56286 8848 CVE-2004-0420 URL:http://secunia.com/advisories/10736/  View
56287 8848 CVE-2004-0420 XF:ie-clsid-file-extension-spoofing(14964)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62829 JVNDB-2004-000171 libpng におけるメモリ領域外へのアクセスによるサービス運用妨害 (Dos) の脆弱性 libpng には、エラー処理ルーチンでエラーメッセージを作成する際に、確保したメモリ領域外にアクセスしてしまう脆弱性が存在します。 CVE-2004-0421 8848 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000171.html  View