CVE-2004-0726

CVE-2004-0726 describes a vulnerability in the Windows Media Player control within Microsoft Windows 2000, allowing remote attackers to execute arbitrary script in the local computer zone. This is achieved by embedding JavaScript within an ASX filename, which is then executed in a preview panel. With a CVSS score of 7.5, this vulnerability is considered high severity due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While the EPSS score indicates it's more exploitable than many CVEs, there is no evidence of active exploitation, nor are there known public exploit tools like Metasploit or Nuclei modules. Community discussion and media coverage for this CVE are also minimal.