CVE-2005-1185: Musicmatch Jukebox

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

Unquoted Windows search path vulnerability in Musicmatch Jukebox 10.00.2047 and earlier allows local users to gain privileges via a malicious C:\program.exe file, which is run by MMFWLaunch.exe when it attempts to execute launch.exe.

Affected products

• Musicmatch Jukebox: up to and including 10.00.2047

Published 2005-05-02. Last modified 2026-06-16.