CVE-2004-1324: Low severity Microsoft Windows Media Player vulnerability
Published Dec 18, 2004
·Updated
The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer.
Affected Software
1 affected component
Microsoft Windows Media Player=9
Remediation
Patch Available
Event History
Dec 18, 2004
CVE Published
05:00 AM
Jan 6, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1324?
CVE-2004-1324 is considered a moderate severity vulnerability.
2
How do I fix CVE-2004-1324?
To fix CVE-2004-1324, it is recommended to update Microsoft Windows Media Player to a later version that addresses this vulnerability.
3
Who is affected by CVE-2004-1324?
CVE-2004-1324 affects users of Microsoft Windows Media Player 9.0 who access music files using Internet Explorer.
4
What type of attack is associated with CVE-2004-1324?
CVE-2004-1324 allows remote attackers to execute arbitrary web script on a victim's computer.
5
Can CVE-2004-1324 be exploited remotely?
Yes, CVE-2004-1324 can be exploited remotely through specially crafted music files.