What’s Vulnerable › Vulnerabilities

CVE-2004-1325

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 15.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2005-01-06 · updated 2026-06-16

Description

The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote attackers to determine the existence of files on the local system.

Affected products

• Microsoft Corporation Windows Media Player: 9

References

• http://marc.info/?l=bugtraq&m=110352518211306&w=2
• http://www.securityfocus.com/bid/12032
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18587
• http://marc.info/?l=bugtraq&m=110352518211306&w=2
• http://www.securityfocus.com/bid/12032
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18587

Get alerted when CVE-2004-1325 or the next vulnerability affects your stack