CVE-2004-1324 in Windows

Riassunto

di MITRE

The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 06/01/2005
• Divulgazione: 18/12/2004
• Moderazione: accettato
• Voce: 2
• Collegare: mostrare
• CPE: pronto
• CWE: CWE-269 (confermato)
• Sfruttamento: Scaricare
• CVSS: 2.6 (NVD)
• EPSS: 0.16650
• KEV: no
• Attività: molto basso
• Settore: Homeoffice, Pharma, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-1324
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-1324
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-1324/