CVE-2004-1324 EXPLOIT
2.6
LOW · CVSS 2.0 · EPSS 16.7% (pctl 97)
Patch early
A public exploit exists.
Description
The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer.
Scoring
| CVSS | 2.6 (LOW, v2.0) |
|---|---|
| Vector | AV:N/AC:H/Au:N/C:N/I:P/A:N |
| EPSS | 16.65% — more likely to be exploited than 97% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2004-12-18 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| microsoft | windows media player |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Microsoft Windows Media Player 9.0 - ActiveX Control Media File Attribute Corruption | 2004-12-18 |
References
→ the Explorer · watch your stack · NVD