CVE-2004-0420 in the critical feed json
The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote at…
published 2004-04-20 22 y ago modified 2026-06-16 4 mo ago also EUVD-2004-0419
- cvss
- 10.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 46.0%
- EPSS 46.0% chance of exploitation in 30 days, percentile 98%
- public exploits
- 0
- none known
Summary
The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by spoofing the type of a file via a CLSID specifier in the filename, as demonstrated using Internet Explorer 6.0.2800.1106 on Windows XP.
Exploit prediction
46.01% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- securityfocus.com http://www.securityfocus.com/bid/9510 referenced PoC, tagged "exploit" by a source, unverified
- securityfocus.com http://www.securityfocus.com/archive/1/351379 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
References
-
securityfocus.com
/bid/9510
vdb-entry, exploit, vendor-advisory
-
securityfocus.com
/archive/1/351379
mailing-list, exploit, vendor-advisory
-
docs.microsoft.com
/en-us/security-updates/securitybulletins/2004/ms04-024
vendor-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/14964
vdb-entry
-
us-cert.gov
/cas/techalerts/TA04-196A.html
third-party-advisory, us-government-resource
-
secunia.com
/advisories/10736/
third-party-advisory
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2894
vdb-entry, signature
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3386
vdb-entry, signature
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3604
vdb-entry, signature
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2245
vdb-entry, signature
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3533
vdb-entry, signature
-
kb.cert.org
/vuls/id/106324
third-party-advisory, us-government-resource
-
security-express.com
/archives/bugtraq/2004-01/0300.html
mailing-list
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2381
vdb-entry, signature
Sources
- CVE List CVE-2004-0420
- NVD CVE-2004-0420
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.