VULNERABILITY INTELLIGENCE

CVE-2004-1324

CVSS score2.6 LOW
EPSS probability16.65%
CISA KEVNot currently listed
Published2004-12-18
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:N/I:P/A:N

Description

The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer.

Primary references