CVE-2004-1324

The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer.

CVSS v2.0

2.6 LOWAV:N/AC:H/Au:N/C:N/I:P/A:N

EPSS

16.65% chance of exploitation in the next 30 days, 97th percentile

Published

2005-01-06

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/25031

References

• CVE Record
• NVD entry

Related

• CVE-2004-1317
• CVE-2004-1325
• CVE-2004-1316
• CVE-2004-1326
• CVE-2004-1315
• CVE-2004-1327