CVE-2004-1325

The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote attackers to determine the existence of files on the local system.
Configurations

Configuration 1 (hide)

cpe:2.3:a:microsoft:windows_media_player:9:*:*:*:*:*:*:*

History

No history.

Information

Published : 2004-12-18 05:00

Updated : 2024-02-04 16:31


NVD link : CVE-2004-1325

Mitre link : CVE-2004-1325

CVE.ORG link : CVE-2004-1325


JSON object : View

Products Affected

microsoft

  • windows_media_player