CVE-2004-0572: Microsoft Grpconv

High severity, CVSS 10.0. EPSS: 50% chance of exploitation in the next 30 days.

Buffer overflow in the Windows Program Group Converter (grpconv.exe) may allow remote attackers to execute arbitrary code via a shell: URL with a long filename and a .grp extension, which is not properly handled when the shell capability launches grpconv.exe.

Affected products

• Microsoft Grpconv: any version

Published 2004-11-03. Last modified 2026-06-16.