CVE-2004-0572

CVE-2004-0572 describes a critical buffer overflow vulnerability in the Windows Program Group Converter (grpconv.exe) affecting Microsoft Windows. This flaw allows remote attackers to execute arbitrary code by crafting a malicious shell: URL containing an excessively long filename with a .grp extension, which is then improperly processed by grpconv.exe. With a CVSS score of 10.0, this vulnerability is highly severe, requiring no authentication and having a low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. While the EPSS score indicates a higher than average likelihood of exploitation, there is no evidence of active exploitation, publicly available exploit code in Metasploit or ExploitDB, or significant community discussion or media coverage.