Description
Buffer overflow in the Windows Program Group Converter (grpconv.exe) may allow remote attackers to execute arbitrary code via a shell: URL with a long filename and a .grp extension, which is not properly handled when the shell capability launches grpconv.exe.
References
- oval:org.mitre.oval:def:1837 vdb-entry signature
- oval:org.mitre.oval:def:4493 vdb-entry signature
- 20040707 Re: shell:windows command question mailing-list
- oval:org.mitre.oval:def:3822 vdb-entry signature
- oval:org.mitre.oval:def:4244 vdb-entry signature
- win-ms04037-patch(17662) vdb-entry
- oval:org.mitre.oval:def:2753 vdb-entry signature
- oval:org.mitre.oval:def:3071 vdb-entry signature
- VU#543864 third-party-advisory
- oval:org.mitre.oval:def:1843 vdb-entry signature
- oval:org.mitre.oval:def:3768 vdb-entry signature
- 10677 vdb-entry
- oval:org.mitre.oval:def:1279 vdb-entry signature
- MS04-037 vendor-advisory
- win-grpconv-bo(16664) vdb-entry