CVE-2004-1324 in Windows

摘要

由 MITRE

The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• 预定: 2005-01-06
• 披露: 2004-12-18
• 管理: 已接受
• 条目: 2
• 连接: 显示
• CPE: 准备好
• CWE: CWE-269 (已确认)
• 利用: 下载
• CVSS: 2.6 (NVD)
• EPSS: 0.16650
• KEV: 否
• 活动: 非常低
• 部门: Police, Transportation, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-1324
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-1324
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-1324/