microsoft windows media player - vulnerabilities and exploits

(subscribe to this query)

9.3

CVSSv2

Microsoft Windows Media Player 10 through 12 allows remote malicious users to execute arbitrary code via a crafted DataObject on a web site, aka "Windows Media Player RCE via DataObject Vulnerability."

Microsoft Windows Media Player 10.00.00.4019 Microsoft Windows Media Player 10.00.00.4036 Microsoft Windows Media Player 11 Microsoft Windows Media Player 11.0.5721.5145 Microsoft Windows Media Player 10 Microsoft Windows Media Player 11.0.5721.5230 Microsoft Windows Media Player 11.0.6000.6324 Microsoft Windows Media Player 10.00.00.3646 Microsoft Windows Media Player 10.00.00.3990 Microsoft Windows Media Player 12

7.5

CVSSv2

Buffer overflow in mplay32.exe of Microsoft Windows Media Player (WMP) 6.3 up to and including 7.1 allows remote malicious users to execute arbitrary commands via a long mp3 filename command line argument. NOTE: since the only known attack vector requires command line access, thi...

Microsoft Windows Media Player 6.3 Microsoft Windows Media Player 6.4 Microsoft Windows Media Player 7 Microsoft Windows Media Player 7.1 Microsoft Windows Media Player -

1 EDB exploit

7.6

CVSSv2

Unspecified vulnerability in Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote malicious users to execute arbitrary code via a skin file (WMZ or WMD) with crafted header information that is not properly handled during decompression, aka "Windows Media Player Co...

Microsoft Windows Media Player 9 Microsoft Windows Media Player 11 Microsoft Windows Media Player 10 Microsoft Windows Media Player 7.1

4

CVSSv2

Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote malicious users to execute arbitrary code via a skin file (WMZ or WMD) with crafted header information that causes a size mismatch between compressed and decompressed data and triggers a heap-based buffer overflow, a...

Microsoft Windows Media Player 10 Microsoft Windows Media Player 9 Microsoft Windows Media Player 11 Microsoft Windows Media Player 7.1

5.1

CVSSv2

The DHTML capability in Microsoft Windows Media Player (WMP) 6.4, 7.0, 7.1, and 9 may run certain URL commands from a security zone that is less trusted than the current zone, which allows malicious users to bypass intended access restrictions.

Microsoft Windows Media Player 7 Microsoft Windows Media Player 7.1 Microsoft Windows Media Player 6.4 Microsoft Windows Media Player 9

7.5

CVSSv2

Microsoft Windows Media Player versions 6.4 and 7.1 and Media Player for Windows XP allow remote malicious users to bypass Internet Explorer's (IE) security mechanisms and run code via an executable .wma media file with a license installation requirement stored in the IE cac...

Microsoft Windows Media Player 7.1 Microsoft Windows Media Player -Microsoft Windows Media Player 6.4

7.5

CVSSv2

Buffer overflow in Microsoft Windows Media Player 7.1 and previous versions allows remote malicious users to execute arbitrary commands via a malformed Windows Media Station (.NSC) file.

Microsoft Windows Media Player 6.4 Microsoft Windows Media Player 7 Microsoft Windows Media Player

4.3

CVSSv2

Microsoft Windows Media Player (WMP) 9.0 through 11 allows user-assisted malicious users to cause a denial of service (application crash) via a malformed (1) MIDI or (2) DAT file, related to "MThd Header Parsing." NOTE: the provenance of this information is unknown; the...

Microsoft Windows Media Player 10 Microsoft Windows Media Player 11 Microsoft Windows Media Player 9

4.3

CVSSv2

Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, including 11.0.5721.5260, allows remote malicious users to cause a denial of service (application crash) via a crafted (1) WAV, (2) SND, or (3) MID file. NOTE: this h...

Microsoft Windows Media Player 9 Microsoft Windows Media Player 10 Microsoft Windows Media Player 11

2 EDB exploits

4.3

CVSSv2

Microsoft Windows Media Player 11 does not properly perform colorspace conversion, which allows remote malicious users to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .AVI file. NOTE: the provenance of this information is unknown;...

Microsoft Windows Media Player 11.0.5721.5145 Microsoft Windows Media Player 11.0.6000.6324 Microsoft Windows Media Player 11

1 EDB exploit

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook