CVE-2004-1325
The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0...
The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote attackers to determine the existence of files on the local system.
Exploit likelihood
What each source reports
NVD Score used
The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote attackers to determine the existence of files on the local system.
- Record
CVE-2004-1325- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote attackers to determine the existence of files on the local system.
- Record
CVE-2004-1325- Updated
- 2026-11-02
EUVDEUVD-2004-1322 No score
The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote attackers to determine the existence of files on the local system.
- Record
EUVD-2004-1322- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vmqr-c49v-3hhp No score
The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0...
The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote attackers to determine the existence of files on the local system.
- Record
GHSA-vmqr-c49v-3hhp- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Windows Media Player 9.0 - ActiveX Control File Enumeration | 2004-12-18 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-1325 is a medium vulnerability (CVSS 5.0) in Microsoft Windows Media Player, published December 18, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 15.7%, the 96th percentile. No source names a fixed version.