CVE-2004-1324: Microsoft Windows Media Player

Low severity, CVSS 2.6. EPSS: 16.7% chance of exploitation in the next 30 days.

The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer.

Affected products

• Microsoft Windows Media Player: version 9 only

Published 2004-12-18. Last modified 2026-06-16.