low2.6Public exploit code
CVE-2004-1324
The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows Media Player 9.0 - ActiveX Control Media File Attribute Corruption2004-12-18 · remote · windows · Verified
Impact
The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows Media Player | Version 9 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=110352518211306&w=2
- http://www.securityfocus.com/bid/12031
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18576
- http://marc.info/?l=bugtraq&m=110352518211306&w=2
- http://www.securityfocus.com/bid/12031
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18576