CVE-2004-1325: Microsoft Windows Media Player

Medium severity, CVSS 5.0. EPSS: 15.7% chance of exploitation in the next 30 days.

The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote attackers to determine the existence of files on the local system.

Affected products

• Microsoft Windows Media Player: version 9 only

Published 2004-12-18. Last modified 2026-06-16.