microsoft web media extensions - vulnerabilities and exploits

(subscribe to this query)

7.8

CVSSv3

Web Media Extensions Remote Code Execution Vulnerability

Microsoft Web Media Extensions -

NA

Heap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Microsoft Windows Media Player (WMP) 10.00.00.4036 on Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote malicious users to cause a denial of service (application crash) and execute arbitrar...

Microsoft Windows Media Player 10.00.00.4036

9.8

CVSSv3

Web Media Extensions Remote Code Execution Vulnerability

Microsoft Raw Image Extension

NA

The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server (IIS) 4.0, 5.0, and 5.1 does not properly handle the error condition when a long URL is provided, which allows remote malicious users to cause a denial of service (crash) when t...

Microsoft Internet Information Server 4.0 Microsoft Internet Information Services 5.0

8.8

CVSSv3

Use after free in Media in Google Chrome before 88.0.4324.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

Google Chrome Microsoft Edge Chromium

6.5

CVSSv3

Insufficient policy enforcement in extensions in Google Chrome before 88.0.4324.96 allowed a remote malicious user to bypass site isolation via a crafted Chrome Extension.

Google Chrome Microsoft Edge Chromium

8.8

CVSSv3

Insufficient policy enforcement in extensions in Google Chrome before 88.0.4324.96 allowed a remote malicious user to bypass content security policy via a crafted Chrome Extension.

Google Chrome Microsoft Edge Chromium

6.8

CVSSv3

Uninitialized use in USB in Google Chrome before 88.0.4324.96 allowed a local malicious user to potentially perform out of bounds memory access via via a USB device.

Google Chrome Microsoft Edge

6.5

CVSSv3

Insufficient policy enforcement in File System API in Google Chrome before 88.0.4324.96 allowed a remote malicious user to bypass file extension policy via a crafted HTML page.

Google Chrome Microsoft Edge

8.8

CVSSv3

Insufficient data validation in V8 in Google Chrome before 88.0.4324.96 allowed a remote malicious user to potentially perform out of bounds memory access via a crafted HTML page.

Google Chrome Microsoft Edge Chromium

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook