CVE-2004-0572 Buffer overflow in the Windows Program Group Converter (grpconv.exe) may allow remote attackers to execute arbitrary code via a shell: URL with a long filename and a .grp extension, which is not prope...
HighCVSS 10.0
EPSS 50.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the Windows Program Group Converter (grpconv.exe) may allow remote attackers to execute arbitrary code via a shell: URL with a long filename and a .grp extension, which is not properly handled when the shell capability launches grpconv.exe.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft grpconv | All versions | No fix listed |
References
- 20040707 Re: shell:windows command question exploit mailing-list vendor-advisory
- VU#543864 patch third-party-advisory us-government-resource
- 10677 patch vdb-entry vendor-advisory
- MS04-037 vendor-advisory
- win-grpconv-bo(16664) vdb-entry
- win-ms04037-patch(17662) vdb-entry
- oval:org.mitre.oval:def:1279 signature vdb-entry
- oval:org.mitre.oval:def:1837 signature vdb-entry
- oval:org.mitre.oval:def:1843 signature vdb-entry
- oval:org.mitre.oval:def:2753 signature vdb-entry
- oval:org.mitre.oval:def:3071 signature vdb-entry
- oval:org.mitre.oval:def:3768 signature vdb-entry
- oval:org.mitre.oval:def:3822 signature vdb-entry
- oval:org.mitre.oval:def:4244 signature vdb-entry
- oval:org.mitre.oval:def:4493 signature vdb-entry