CVE-2004-1325: Medium severity Microsoft Windows Media Player vulnerability
The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote attackers to determine the existence of files on the local system.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1325?
CVE-2004-1325 is considered to be a moderate severity vulnerability, as it can lead to information disclosure.
How do I fix CVE-2004-1325?
To mitigate CVE-2004-1325, users should upgrade to a newer version of Windows Media Player that is not affected by this vulnerability.
What types of attacks can exploit CVE-2004-1325?
CVE-2004-1325 can be exploited by attackers to check for the existence of files on the local system, which can lead to further attacks.
Who is affected by CVE-2004-1325?
CVE-2004-1325 affects users of Microsoft Windows Media Player version 9.
What does CVE-2004-1325 allow an attacker to do?
CVE-2004-1325 allows an attacker to determine the existence of files on the victim's local system.