CVE-2017-0042

🗓️ 17 Mar 2017 00:00:00Reported by microsoftType

cve🔗 web.nvd.nist.gov👁 99 Views🌐 WEB

CVE-2017-0042 Windows Media Player Information Disclosure Vulnerabilit

Reporter	Title	Published	Views	Family All 25
Check Point Advisories	Microsoft Windows DirectShow Information Disclosure (MS17-021: CVE-2017-0042)	14 Mar 201700:00	–	checkpoint_advisories
Cvelist	CVE-2017-0042	17 Mar 201700:00	–	cvelist
Microsoft KB	Security update 2017-03-14	14 Mar 201707:00	–	mskb
Microsoft KB	MS17-021: Security update for Windows DirectShow: March 14, 2017	14 Mar 201700:00	–	mskb
Microsoft KB	March 2017 Security Only Quality Update for Windows 7 SP1 and Windows Server 2008 R2 SP1	14 Mar 201707:00	–	mskb
Microsoft KB	March 2017 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2	14 Mar 201707:00	–	mskb
Microsoft KB	March 2017 Security Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1	14 Mar 201707:00	–	mskb
Microsoft KB	March 2017 Security Monthly Quality Rollup for Windows 8.1 and Windows Server 2012 R2	14 Mar 201707:00	–	mskb
Microsoft KB	March 14, 2017—KB4012606 (OS Build 10240.17319)	14 Mar 201707:00	–	mskb
Microsoft KB	March 14, 2017—KB4013198 (OS Build 10586.839)	14 Mar 201707:00	–	mskb

NVD

Node

microsoft windows_10Match-

microsoft windows_10Match1511

microsoft windows_10Match1607

microsoft windows_7sp1

microsoft windows_8.1

microsoft windows_rt_8.1

microsoft windows_server_2008sp2

microsoft windows_server_2008Matchr2sp1

microsoft windows_server_2012Matchr2

microsoft windows_server_2016

microsoft windows_vistasp2

[
  {
    "product": "Windows DirectShow",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Windows Media Player in Microsoft Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; Windows 7 SP1; Windows 2008 SP2 and R2 SP1, Windows Server 2016; Windows Vista SP2; and Windows 10 Gold, 1511, and 1607"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1038016
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0042
twitter	www.twitter.com/Qab/status/842506404950917120
securityfocus	www.securityfocus.com/bid/96098
pastebin	www.pastebin.com/raw/Eztknq4s

Parameter	Position	Path	Description	CWE
URL	nested	file://C://Windows//win.ini//con.mp3	Windows Media Player Information Disclosure vulnerability PoC via crafted web page loading a local file to trigger information disclosure (CVE-2017-0042).	CWE-200

13 May 2026 00:24Current

3.4Low risk

Vulners AI Score3.4

CVSS 22.6

CVSS 33.1

EPSS0.14442

CWE-200