CVE-2004-0726

Published: Jul 27, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The Windows Media Player control in Microsoft Windows 2000 allows remote attackers to execute arbitrary script in the local computer zone via an ASX filename that contains javascript, which is executed in the local context in a preview panel.

Affected (5)

Products: Microsoft: Windows 2000

Microsoft

1 product

Windows 2000

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions

References (6)

http://marc.info/?l=bugtraq&m=108965512912175&w=2

Source: cve@mitre.org

http://www.securityfocus.com/bid/10693

Source: cve@mitre.org

ExploitVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/16704

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=108965512912175&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/10693

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/16704

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.