CVE-2004-0420

Current Description

The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by spoofing the type of a file via a CLSID specifier in the filename, as demonstrated using Internet Explorer 6.0.2800.1106 on Windows XP.

Basic Data

PublishedJuly 07, 2004
Last ModifiedOctober 12, 2018
Assignercve@mitre.org
Data TypeCVE
Data FormatMITRE
Data Version4.0
Problem TypeNVD-CWE-Other
CVE Data Version4.0

Base Metric V2

CVSS 2 - Version2.0
CVSS 2 - Vector StringAV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS 2 - Access VectorNETWORK
CVSS 2 - Access ComplexityLOW
CVSS 2 - AuthenticationNONE
CVSS 2 - Confidentiality ImpactCOMPLETE
CVSS 2 - Availability ImpactCOMPLETE
CVSS 2 - Base Score10.0
SeverityHIGH
Exploitability Score10.0
Impact Score10.0
Obtain All Privilegetrue
Obtain User Privilegefalse
Obtain Other Privilegefalse

Base Metric V3

No data provided.

Configurations

  • OR - Configuration 1
    Cpe VersionPartVendorProductVersionUpdateEditionLanguageSW EditionTarget SWTarget HWOtherVersion Start IncludingVersion End IncludingVersion Start ExcludingVersion End Excluding
    2.3ApplicationMicrosoftIe6.0*******
    2.3ApplicationMicrosoftIe6.0sp1******
    2.3ApplicationMicrosoftIe6.0.2800.1106*******

Vulnerable Software List

VendorProductVersions
Microsoft Ie 6.0, 6.0.2800.1106

References

NameSourceURLTags
10736http://secunia.com/advisories/10736/SECUNIA
VU#106324http://www.kb.cert.org/vuls/id/106324CERT-VNUS Government Resource
20040127 RE: GOOROO CROSSING: File Spoofing Internet Explorer 6http://www.security-express.com/archives/bugtraq/2004-01/0300.htmlBUGTRAQ
20040127 GOOROO CROSSING: File Spoofing Internet Explorer 6http://www.securityfocus.com/archive/1/351379BUGTRAQExploit Vendor Advisory
9510http://www.securityfocus.com/bid/9510BIDExploit Vendor Advisory
TA04-196Ahttp://www.us-cert.gov/cas/techalerts/TA04-196A.htmlCERTUS Government Resource
MS04-024https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-024MS
ie-clsid-file-extension-spoofing(14964)https://exchange.xforce.ibmcloud.com/vulnerabilities/14964XF
oval:org.mitre.oval:def:2245https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2245OVAL
oval:org.mitre.oval:def:2381https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2381OVAL
oval:org.mitre.oval:def:2894https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2894OVAL
oval:org.mitre.oval:def:3386https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3386OVAL
oval:org.mitre.oval:def:3533https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3533OVAL
oval:org.mitre.oval:def:3604https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3604OVAL