[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

255116

 
 

909

 
 

198683

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2004-0572Date: (C)2004-11-03   (M)2023-12-22


Buffer overflow in the Windows Program Group Converter (grpconv.exe) may allow remote attackers to execute arbitrary code via a shell: URL with a long filename and a .grp extension, which is not properly handled when the shell capability launches grpconv.exe.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 10.0
Exploit Score: 10.0
Impact Score: 10.0
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE
  
Reference:
BID-10677
http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0290.html
MS04-037
VU#543864
oval:org.mitre.oval:def:1279
oval:org.mitre.oval:def:1837
oval:org.mitre.oval:def:1843
oval:org.mitre.oval:def:2753
oval:org.mitre.oval:def:3071
oval:org.mitre.oval:def:3768
oval:org.mitre.oval:def:3822
oval:org.mitre.oval:def:4244
oval:org.mitre.oval:def:4493
win-grpconv-bo(16664)
win-ms04037-patch(17662)

CPE    1
cpe:/a:microsoft:grpconv
OVAL    9
oval:org.mitre.oval:def:1837
oval:org.mitre.oval:def:4244
oval:org.mitre.oval:def:4493
oval:org.mitre.oval:def:2753
...

© SecPod Technologies