CVE-2006-0005

A buffer overflow vulnerability exists in the Microsoft Windows Media Player (WMP) 9 and 10 plug-in when utilized by non-Microsoft browsers (such as Firefox or Opera) and configured as the default application for media files. The root cause is a failure to properly check the boundaries of resourc...

CVE-2002-1844

CVE-2002-1844 affects Microsoft Windows Media Player 6.3 when installed on Solaris, where executables are created with world-writable permissions. This allows local users to delete or modify executables to gain privileges. Documents confirm the issue but do not provide a confirmed patch or fix. P...

CVE-2002-1847

CVE-2002-1847 concerns a buffer overflow in mplay32.exe of Microsoft Windows Media Player (versions 6.3–7.1). The vulnerability is triggered by a long mp3 filename command line argument, potentially allowing a remote attacker to execute arbitrary commands. The initial description notes that the o...

CVE-2005-1574

CVE-2005-1574 affects Windows Media Player versions 9 and 10, where WMDRM-protected content could redirect users to a licensing Web site even if the auto-license setting is disabled. The connected sources describe the impact as a license-redirect vulnerability within WMDRM, but do not provide dee...

CVE-2003-1107

Technical details about CVE-2003-1107 are not publicly provided in the supplied documents. Monitor for updates from official advisories or vendor advisories.

CVE-2003-0604

The CVE-2003-0604 entry concerns Windows Media Player 7 and 8 running within Internet Explorer (and other HTML-processing Microsoft products) that process an HTML iframe. The vulnerability arises when an IFRAME tag pointing to an ASF file with a Content-location containing a File:// URL bypasses ...

CVE-2002-0340

CVE-2002-0340 concerns Windows Media Player (WMP) 8.00.00.4477 and potentially other versions, where the player can automatically detect and execute .wmf and similar content even if the file extension or content type does not indicate .wmf. This behavior could enable attackers to trigger unauthor...

CVE-2001-0148

The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via javascript URLs, a variant of the "Frame Domain Verification" vulnerability...

CVE-2001-0148

The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via javascript URLs, a variant of the "Frame Domain Verification" vulnerability...

CVE-2001-0148: Undefined Security Weakness

The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via javascript URLs, a variant of the "Frame Domain Verification" vulnerability...