CVE-2015-1728

2015-06-1001:59:09

CWE-17

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

0.143

Percentile

95.8%

JSON

Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka “Windows Media Player RCE via DataObject Vulnerability.”

Affected configurations

Nvd

Node

microsoftwindows_media_playerMatch10

microsoftwindows_media_playerMatch10.00.00.3646

microsoftwindows_media_playerMatch10.00.00.3990

microsoftwindows_media_playerMatch10.00.00.4019

microsoftwindows_media_playerMatch10.00.00.4036

microsoftwindows_media_playerMatch11

microsoftwindows_media_playerMatch11.0.5721.5145

microsoftwindows_media_playerMatch11.0.5721.5230

microsoftwindows_media_playerMatch11.0.6000.6324

microsoftwindows_media_playerMatch12

VendorProductVersionCPE
microsoftwindows_media_player10cpe:2.3:a:microsoft:windows_media_player:10:*:*:*:*:*:*:*
microsoftwindows_media_player10.00.00.3646cpe:2.3:a:microsoft:windows_media_player:10.00.00.3646:*:*:*:*:*:*:*
microsoftwindows_media_player10.00.00.3990cpe:2.3:a:microsoft:windows_media_player:10.00.00.3990:*:*:*:*:*:*:*
microsoftwindows_media_player10.00.00.4019cpe:2.3:a:microsoft:windows_media_player:10.00.00.4019:*:*:*:*:*:*:*
microsoftwindows_media_player10.00.00.4036cpe:2.3:a:microsoft:windows_media_player:10.00.00.4036:*:*:*:*:*:*:*
microsoftwindows_media_player11cpe:2.3:a:microsoft:windows_media_player:11:*:*:*:*:*:*:*
microsoftwindows_media_player11.0.5721.5145cpe:2.3:a:microsoft:windows_media_player:11.0.5721.5145:*:*:*:*:*:*:*
microsoftwindows_media_player11.0.5721.5230cpe:2.3:a:microsoft:windows_media_player:11.0.5721.5230:*:*:*:*:*:*:*
microsoftwindows_media_player11.0.6000.6324cpe:2.3:a:microsoft:windows_media_player:11.0.6000.6324:*:*:*:*:*:*:*
microsoftwindows_media_player12cpe:2.3:a:microsoft:windows_media_player:12:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_media_player	10	cpe:2.3:a:microsoft:windows_media_player:10:::::::*
microsoft	windows_media_player	10.00.00.3646	cpe:2.3:a:microsoft:windows_media_player:10.00.00.3646:::::::*
microsoft	windows_media_player	10.00.00.3990	cpe:2.3:a:microsoft:windows_media_player:10.00.00.3990:::::::*
microsoft	windows_media_player	10.00.00.4019	cpe:2.3:a:microsoft:windows_media_player:10.00.00.4019:::::::*
microsoft	windows_media_player	10.00.00.4036	cpe:2.3:a:microsoft:windows_media_player:10.00.00.4036:::::::*
microsoft	windows_media_player	11	cpe:2.3:a:microsoft:windows_media_player:11:::::::*
microsoft	windows_media_player	11.0.5721.5145	cpe:2.3:a:microsoft:windows_media_player:11.0.5721.5145:::::::*
microsoft	windows_media_player	11.0.5721.5230	cpe:2.3:a:microsoft:windows_media_player:11.0.5721.5230:::::::*
microsoft	windows_media_player	11.0.6000.6324	cpe:2.3:a:microsoft:windows_media_player:11.0.6000.6324:::::::*
microsoft	windows_media_player	12	cpe:2.3:a:microsoft:windows_media_player:12:::::::*