CVE ID:	CVE-2004-0420
Description:	The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by spoofing the type of a file via a CLSID specifier in the filename, as demonstrated using Internet Explorer 6.0.2800.1106 on Windows XP.
Test IDs:	1.3.6.1.4.1.25623.1.0.13642
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0420 BugTraq ID: 9510 http://www.securityfocus.com/bid/9510 Bugtraq: 20040127 GOOROO CROSSING: File Spoofing Internet Explorer 6 (Google Search) http://www.securityfocus.com/archive/1/351379 Bugtraq: 20040127 RE: GOOROO CROSSING: File Spoofing Internet Explorer 6 (Google Search) http://www.security-express.com/archives/bugtraq/2004-01/0300.html Cert/CC Advisory: TA04-196A http://www.us-cert.gov/cas/techalerts/TA04-196A.html CERT/CC vulnerability note: VU#106324 http://www.kb.cert.org/vuls/id/106324 Microsoft Security Bulletin: MS04-024 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-024 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2245 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2381 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2894 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3386 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3533 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3604 http://secunia.com/advisories/10736/ XForce ISS Database: ie-clsid-file-extension-spoofing(14964) https://exchange.xforce.ibmcloud.com/vulnerabilities/14964