Exploitation Summary
EIP tracks 1 public exploit for CVE-2004-1324. PoCs published by Arman Nayyeri.
AI-analyzed exploit summary This exploit demonstrates a weakness in the Windows Media Player ActiveX control that allows manipulation of media file attributes (e.g., Artist, Title, Album) via script injection. It leverages the ability to modify metadata in local files, potentially leading to arbitrary code execution if combined with another vulnerability.
Description
The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer.
Exploits (1)
This exploit demonstrates a weakness in the Windows Media Player ActiveX control that allows manipulation of media file attributes (e.g., Artist, Title, Album) via script injection. It leverages the ability to modify metadata in local files, potentially leading to arbitrary code execution if combined with another vulnerability.