CVE-2004-1325 The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote att...
MediumCVSS 5.0
EPSS 15.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote attackers to determine the existence of files on the local system.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows media player | = 9 | No fix listed |
References
- 20041218 MS Windows Media Player 9 Vulns (2) mailing-list
- 12032 exploit patch vdb-entry vendor-advisory
- mediaplayer-activex-information-disclosure(18587) vdb-entry