CVE-2004-0420

The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by spoofing the type of a file via a CLSID specifier in the filename, as demonstrated using Internet Explorer 6.0.2800.1106 on Windows XP.

• http://secunia.com/advisories/10736/
• http://www.kb.cert.org/vuls/id/106324US Government Resource
• http://www.security-express.com/archives/bugtraq/2004-01/0300.html
• http://www.securityfocus.com/archive/1/351379Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/9510Exploit, Vendor Advisory
• http://www.us-cert.gov/cas/techalerts/TA04-196A.htmlUS Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-024
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14964
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2245
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2381
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2894
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3386
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3533
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3604
• http://secunia.com/advisories/10736/
• http://www.kb.cert.org/vuls/id/106324US Government Resource
• http://www.security-express.com/archives/bugtraq/2004-01/0300.html
• http://www.securityfocus.com/archive/1/351379Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/9510Exploit, Vendor Advisory
• http://www.us-cert.gov/cas/techalerts/TA04-196A.htmlUS Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-024
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14964
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2245
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2381
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2894
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3386
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3533
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3604

Published

Jul 7, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0414CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does …
• CVE-2004-0415Linux kernel does not properly convert 64-bit file offset po…
• CVE-2004-0416Double free vulnerability for the error_prog_name string in …
• CVE-2004-0417Integer overflow in the "Max-dotdot" CVS protocol command (s…
• CVE-2004-0418serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x throug…
• CVE-2004-0419XDM in XFree86 opens a chooserFd TCP socket even when Displa…
• CVE-2004-0421The Portable Network Graphics library (libpng) 1.0.15 and ea…
• CVE-2004-0422flim before 1.14.3 creates temporary files insecurely, which…
• CVE-2004-0423The log_event function in ssmtp 2.50.6 and earlier allows lo…
• CVE-2004-0424Integer overflow in the ip_setsockopt function in Linux kern…
• CVE-2004-0425Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x…
• CVE-2004-0426rsync before 2.6.1 does not properly sanitize paths when run…