{"id":"CVE-2004-1324","aliases":["EUVD-2004-1321","GHSA-m42j-v8jp-9cwc"],"status":"published","title":"The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute...","description":"The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer.","severity":{"version":"2.0","score":2.6,"vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.1665,"percentile":0.97041,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2004-12-18T05:00:00Z","modified":"2026-06-16T22:07:28Z","exploits":[{"source":"exploitdb","id":"EDB-25031","title":"Microsoft Windows Media Player 9.0 - ActiveX Control Media File Attribute Corruption","type":"remote","platform":"windows","date":"2004-12-18","verified":true,"url":"https://www.exploit-db.com/exploits/25031"}],"products":[{"vendor":"microsoft","product":"windows_media_player"}],"references":[{"url":"http://marc.info/?l=bugtraq\u0026m=110352518211306\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18576","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/bid/12031","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-1324"},{"url":"https://github.com/advisories/GHSA-m42j-v8jp-9cwc"}],"sources":{"cve":[{"id":"CVE-2004-1324","description":"The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer.","status":"published","published":"2005-01-06T05:00:00Z","modified":"2024-08-08T00:46:12.357Z","updated_at":"2026-11-02T14:34:54.063504Z"}],"euvd":[{"id":"EUVD-2004-1321","description":"The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer.","status":"published","published":"2005-01-06T05:00:00Z","modified":"2024-08-08T00:46:12Z","updated_at":"2026-11-03T01:15:15.165388Z"}],"ghsa":[{"id":"GHSA-m42j-v8jp-9cwc","title":"The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute...","description":"The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer.","status":"published","published":"2022-04-29T02:59:20Z","modified":"2023-01-30T05:03:24Z","updated_at":"2026-11-02T14:46:50.018589Z"}],"nvd":[{"id":"CVE-2004-1324","description":"The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer.","status":"published","published":"2004-12-18T05:00:00Z","modified":"2026-06-16T22:07:28.56Z","cvss":[{"version":"2.0","score":2.6,"vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:00:51.985436Z"}]}}