Vulnerability Details : CVE-2004-0420

The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by spoofing the type of a file via a CLSID specifier in the filename, as demonstrated using Internet Explorer 6.0.2800.1106 on Windows XP.
Vulnerability category: Execute code
Published 2004-07-07 04:00:00
Updated 2021-07-23 15:03:00
Source MITRE
View at NVD,

Exploit prediction scoring system (EPSS) score for CVE-2004-0420

Probability of exploitation activity in the next 30 days: 96.68%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 99 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2004-0420

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Source

References for CVE-2004-0420

Products affected by CVE-2004-0420

This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to terms of use!