VULNERABILITY INTELLIGENCE
CVE-2004-0572
CVSS score10 HIGH
EPSS probability49.95%
CISA KEVNot currently listed
Published2004-11-03
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Buffer overflow in the Windows Program Group Converter (grpconv.exe) may allow remote attackers to execute arbitrary code via a shell: URL with a long filename and a .grp extension, which is not properly handled when the shell capability launches grpconv.exe.
Primary references
- cve@mitre.org — Exploit, Vendor Advisory
- cve@mitre.org — Patch, Third Party Advisory, US Government Resource
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org