CVE-2005-1185: Unquoted Windows search path vulnerability in Musicmatch Jukebox 10.00.2047 and earlier allows local users...

Security readout for executives and security teams

This is an old local privilege issue in Musicmatch Jukebox. On affected Windows systems, the software may run the wrong executable because a path is not quoted. A local user who can place a malicious program at C:\program.exe could have it launched by Musicmatch behavior. Business urgency is limited to legacy endpoints still running this software. Exposure is likely limited to Windows endpoints with Musicmatch Jukebox 10.00.2047 or earlier installed, especially unmanaged legacy workstations. The bundle lists affected product metadata as unavailable, so inventory validation should rely on local software discovery and endpoint evidence. Handle through legacy software hygiene rather than emergency response. Prioritize if Musicmatch Jukebox remains on shared, kiosk, lab, or high-value Windows endpoints. No source provided here supports active exploitation or internet-scale exposure. Mitigation focus: Identify and remove unsupported Musicmatch Jukebox installations where business use is not justified.; Check vendor or archival guidance for any available fixed version or official workaround.; Restrict standard users from writing executable files to system root paths..

Prepared

Jun 29, 2026, 22:30 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.