CVE-2004-1324 The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if t...
LowCVSS 2.6
EPSS 16.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows media player | = 9 | No fix listed |
References
- 20041218 MS Windows Media Player 9 Vulns (2) mailing-list
- 12031 exploit patch vdb-entry vendor-advisory
- mediaplayer-mp3-code-execution(18576) vdb-entry