NVD

Id
70867  
Name
CVE-2004-0420  
Description
The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by spoofing the type of a file via a CLSID specifier in the filename, as demonstrated using Internet Explorer 6.0.2800.1106 on Windows XP.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-07-07  
Modified Date
2017-07-10  
Seq
2004-0420  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
365631 70867 CVE-2004-0420 oval:org.mitre.oval:def:2245  View
365632 70867 CVE-2004-0420 oval:org.mitre.oval:def:2381  View
365633 70867 CVE-2004-0420 oval:org.mitre.oval:def:2894  View
365634 70867 CVE-2004-0420 oval:org.mitre.oval:def:3386  View
365635 70867 CVE-2004-0420 oval:org.mitre.oval:def:3533  View
365636 70867 CVE-2004-0420 oval:org.mitre.oval:def:3604  View
365637 70867 CVE-2004-0420 VU#106324  View
365638 70867 CVE-2004-0420 MS04-024  View
365639 70867 CVE-2004-0420 20040127 RE: GOOROO CROSSING: File Spoofing Internet Explorer 6  View
365640 70867 CVE-2004-0420 20040127 GOOROO CROSSING: File Spoofing Internet Explorer 6  View
365641 70867 CVE-2004-0420 9510  View
365642 70867 CVE-2004-0420 TA04-196A  View
365643 70867 CVE-2004-0420 ie-clsid-file-extension-spoofing(14964)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62939 JVNDB-2004-000281 Microsoft Windows Shell における CLSID を拡張子に含むファイルを介して任意のコマンドを実行される脆弱性 Microsoft Windows シェルには、特定のクラス ID (CLSID) をファイルの拡張子に含むファイルの取り扱いに不備があるため、ファイルの拡張子を偽装可能な脆弱性が存在します。 CVE-2004-0420 8847 CVE-2004-0420 70867 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000281.html 2004-07-13 2007-04-01 View