Exploitation Summary
EIP tracks 1 public exploit for CVE-2004-1325. PoCs published by Arman Nayyeri.
AI-analyzed exploit summary This exploit leverages a file enumeration vulnerability in the Windows Media Player ActiveX control (CVE-2004-1325) by prompting the user for a file path and using the `getItemInfoByAtom` method to check file existence and size. It demonstrates an information leak that could aid further attacks.
Description
The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote attackers to determine the existence of files on the local system.
Exploits (1)
This exploit leverages a file enumeration vulnerability in the Windows Media Player ActiveX control (CVE-2004-1325) by prompting the user for a file path and using the `getItemInfoByAtom` method to check file existence and size. It demonstrates an information leak that could aid further attacks.