The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote attackers to determine the existence of files on the local system.
References
| Link | Resource |
|---|---|
| http://marc.info/?l=bugtraq&m=110352518211306&w=2 | |
| http://www.securityfocus.com/bid/12032 | Exploit Patch Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/18587 | |
| http://marc.info/?l=bugtraq&m=110352518211306&w=2 | |
| http://www.securityfocus.com/bid/12032 | Exploit Patch Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/18587 |
Configurations
History
20 Nov 2024, 23:50
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://marc.info/?l=bugtraq&m=110352518211306&w=2 - | |
| References | () http://www.securityfocus.com/bid/12032 - Exploit, Patch, Vendor Advisory | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/18587 - |
Information
Published : 2004-12-18 05:00
Updated : 2025-04-03 01:03
NVD link : CVE-2004-1325
Mitre link : CVE-2004-1325
CVE.ORG link : CVE-2004-1325
JSON object : View
Products Affected
microsoft
- windows_media_player
CWE
