VULNERABILITY INTELLIGENCE

CVE-2004-1623

CVSS score5 MEDIUM
EPSS probability18.56%
CISA KEVNot currently listed
Published2004-10-22
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The WAV file property handler in Windows XP SP1 allows remote attackers to cause a denial of service (infinite loop in Explorer) via a WAV file with an invalid file header whose fmt chunk length is set to 0xFFFFFFFF.

Primary references