Windows Media Player ActiveX Control File Enumeration Weakness

Bugtraq ID:	12032
Class:	Access Validation Error
CVE:	CAN-2004-1325
Remote:	Yes
Local:	No
Published:	Dec 18 2004 12:00AM
Updated:	Dec 18 2004 12:00AM
Credit:	Discovery is credited to Arman Nayyeri.
Vulnerable:	Microsoft Windows Media Player 9.0 + Microsoft Windows Server 2003 Datacenter Edition + Microsoft Windows Server 2003 Datacenter Edition + Microsoft Windows Server 2003 Datacenter Edition Itanium 0 + Microsoft Windows Server 2003 Datacenter Edition Itanium 0 + Microsoft Windows Server 2003 Enterprise Edition + Microsoft Windows Server 2003 Enterprise Edition + Microsoft Windows Server 2003 Enterprise Edition Itanium 0 + Microsoft Windows Server 2003 Enterprise Edition Itanium 0 + Microsoft Windows Server 2003 Standard Edition + Microsoft Windows Server 2003 Standard Edition + Microsoft Windows Server 2003 Web Edition + Microsoft Windows Server 2003 Web Edition

Not Vulnerable:	Microsoft Windows Media Player 10.0