CVE-2004-1623: Medium severity Microsoft Windows XP vulnerability
The WAV file property handler in Windows XP SP1 allows remote attackers to cause a denial of service (infinite loop in Explorer) via a WAV file with an invalid file header whose fmt chunk length is set to 0xFFFFFFFF.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1623?
CVE-2004-1623 has been classified as a denial of service vulnerability.
How do I fix CVE-2004-1623?
To mitigate CVE-2004-1623, users should upgrade to a later service pack or version of Windows that addresses this vulnerability.
Which systems are affected by CVE-2004-1623?
CVE-2004-1623 affects Microsoft Windows XP SP1, including its various editions such as Home, Professional, and Media Center.
What type of attack does CVE-2004-1623 enable?
CVE-2004-1623 allows remote attackers to cause a denial of service that leads to an infinite loop in Windows Explorer.
Is there a workaround for CVE-2004-1623?
Disabling the ability to open WAV files or using a different media player can serve as a temporary workaround for CVE-2004-1623.