AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2004-0420

HIGH · CVSS 10 EPSS 46.01%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2004-07-07 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 10.0. It affects Windows. Its EPSS score suggests a 46.0% probability of exploitation in the next 30 days. It may be remotely exploitable.

CVE
CVE-2004-0420
Severity
HIGH
CVSS
10
EPSS
46.01%
Windows

Original NVD Description

The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by spoofing the type of a file via a CLSID specifier in the filename, as demonstrated using Internet Explorer 6.0.2800.1106 on Windows XP.