CVE-2004-1623

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 18.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-02-20 · updated 2026-06-16

Description

The WAV file property handler in Windows XP SP1 allows remote attackers to cause a denial of service (infinite loop in Explorer) via a WAV file with an invalid file header whose fmt chunk length is set to 0xFFFFFFFF.

Affected products

Microsoft Windows XP Service Pack 3: all versions

References

http://marc.info/?l=bugtraq&m=109846319313443&w=2
http://securitytracker.com/id?1011880
http://www.hexview.com/docs/20041021-1.txt
http://www.osvdb.org/11053
http://www.securityfocus.com/bid/11503
https://exchange.xforce.ibmcloud.com/vulnerabilities/17864
http://marc.info/?l=bugtraq&m=109846319313443&w=2
http://securitytracker.com/id?1011880
http://www.hexview.com/docs/20041021-1.txt
http://www.osvdb.org/11053
http://www.securityfocus.com/bid/11503
https://exchange.xforce.ibmcloud.com/vulnerabilities/17864

Get alerted when CVE-2004-1623 or the next vulnerability affects your stack