CVE-2004-1324
The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute...
The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer.
Exploit likelihood
What each source reports
NVD Score used
The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer.
- Record
CVE-2004-1324- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer.
- Record
CVE-2004-1324- Updated
- 2026-11-02
EUVDEUVD-2004-1321 No score
The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer.
- Record
EUVD-2004-1321- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m42j-v8jp-9cwc No score
The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute...
The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer.
- Record
GHSA-m42j-v8jp-9cwc- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Windows Media Player 9.0 - ActiveX Control Media File Attribute Corruption | 2004-12-18 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-1324 is a low vulnerability (CVSS 2.6) in Microsoft Windows Media Player, published December 18, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 16.7%, the 97th percentile. No source names a fixed version.