The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote attackers to determine the existence of files on the local system.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/12032 | Exploit Patch Vendor Advisory |
| http://marc.info/?l=bugtraq&m=110352518211306&w=2 | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/18587 |
Configurations
Information
Published : 2004-12-17 21:00
Updated : 2017-07-10 18:30
NVD link : CVE-2004-1325
Mitre link : CVE-2004-1325
JSON object : View
CWE
Products Affected
microsoft
- windows_media_player


