CVE-2004-1324

low · 2.6

The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer.

2.6

CVSS

16.7%

EPSS (exploit prob.)

97th

EPSS percentile

2004-12-18

Published

AV:N/AC:H/Au:N/C:N/I:P/A:N

Affected products

Vendor	Product	Affected versions
microsoft	windows_media_player	9

Check a specific version with /api/v1/cve/match.

References

http://marc.info/?l=bugtraq&m=110352518211306&w=2
http://www.securityfocus.com/bid/12031
https://exchange.xforce.ibmcloud.com/vulnerabilities/18576
http://marc.info/?l=bugtraq&m=110352518211306&w=2
http://www.securityfocus.com/bid/12031
https://exchange.xforce.ibmcloud.com/vulnerabilities/18576

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2004-1324