CVE-2010-2745

CVE-2010-2745 is a Windows Media Player memory corruption vulnerability affecting WMP 9–12. It arises when Windows Media Player fails to deallocate objects during a browser reload, allowing a remote attacker to execute arbitrary code by convincing a user to visit a crafted web page. Exploitation ...

Mozilla Firefox 3.5.10/3.6.6 - 'WMP' Memory Corruption Using Popups

Source: http://code.google.com/p/skylined/issues/detail?id=21 Exploit Title: Firefox 3.5.10 & 3.6.6 WMP Memory Corruption Using Popups Date: 2010-10-13 Author: berendjanwever Version: FF 3.5.10 & 3.6.6 with WMP 10 & 11 Tested on: Windows XP sp3 function go var oWMP = document.getElementById"WMP";...

Mozilla Firefox 3.5.103.6.6 - WMP Memory Corruption Using Popups

Mozilla Firefox 3.5.103.6.6 - WMP Memory Corruption Using Popups Source: http://code.google.com/p/skylined/issues/detail?id=21 Exploit Title: Firefox 3.5.10 & 3.6.6 WMP Memory Corruption Using Popups Date: 2010-10-13 Author: berendjanwever Version: FF 3.5.10 & 3.6.6 with WMP 10 & 11 Tested on:...

CVE-2009-2527

Heap-based buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via 1 a crafted ASF file or 2 crafted streaming content, aka "WMP Heap Overflow Vulnerability."...

CVE-2009-1331

Microsoft Windows Media Player (WMP) is affected by CVE-2009-1331 due to a MID file integer overflow vulnerability in WMP 11.0.5721.5260, enabling remote attackers to crash the program (DoS) by processing a crafted crash.mid. OpenVAS entries confirm the same issue and describe a denial-of-service...

Integer overflow

Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player WMP 9, 10, and 11, including 11.0.5721.5260, allows remote attackers to cause a denial of service application crash via a crafted 1 WAV, 2 SND, or 3 MID file. NOTE: this has been incorrectly reported as a...

CVE-2008-5745

Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player WMP 9, 10, and 11, including 11.0.5721.5260, allows remote attackers to cause a denial of service application crash via a crafted 1 WAV, 2 SND, or 3 MID file. NOTE: this has been incorrectly reported as a...

MS Windows Media Player * (.WAV) Remote Crash PoC

Exploit for windows platform in category dos / poc ================================================= MS Windows Media Player .WAV Remote Crash PoC ================================================= ----------------------------------------------------------------------------------------| MS Windows...

CVE-2008-4927

CVE-2008-4927 affects Microsoft Windows Media Player (WMP) 9.0 through 11. The vulnerability is a denial-of-service condition caused by parsing errors in MIDI or DAT files, specifically related to the MThd Header Parsing . It allows a user-assisted attacker to crash the application. The available...

CVE-2007-6236

The vulnerability CVE-2007-6236 affects Microsoft Windows Media Player. Description: WMP can be remotely triggered by processing a specially crafted AIFF file (kr.aiff) to cause an application crash via a divide-by-zero error. Impact is a remote denial of service on affected WMP instances. No spe...

Microsoft Windows Media Player - .AIFF Divide By Zero Exception Denial of Service (PoC)

Microsoft Windows Media Player - .AIFF Divide By Zero Exception Denial of Service PoC / Windows Media Player AIFF Divide By Zero Exception DOS POC by Hong Gil-Dong, Jeon Woo-chi Jeong Ji-Sang ?∼1135, He was one of the most famous korean poet. This poem says sadness about good-bye'. 送人...

CVE-2007-5095

CVE-2007-5095 affects Microsoft Windows Media Player 9 on Windows XP SP2, where WMP invokes Internet Explorer to render HTML documents embedded in certain media files (notably via the HTMLView parameter in .asx files). Root cause is the browser rendering trigger from within WMP, potentially expos...

CVE-2006-6134

CVE-2006-6134 is a Windows Media Format ASX/ASX parsing vulnerability affecting Windows Media Player (WMP) 10.00.00.4036 on Windows XP SP2 and Windows Server 2003/2003 SP1. It arises from a heap-based/ parsing flaw in the Windows Media Format Runtime when handling ASX files, allowing remote code ...

CVE-2006-0005

The CVE-2006-0005 vulnerability is a buffer overflow in the Windows Media Player plug-in (npdsplay.dll) used by non‑Microsoft browsers. When a user views HTML containing an EMBED tag with a long src attribute, it may allow remote code execution in the user’s context. Affected software includes Wi...

CVE-2002-1844

CVE-2002-1844 affects Microsoft Windows Media Player 6.3 when installed on Solaris, where executables are created with world-writable permissions. This allows local users to delete or modify executables to gain privileges. Documents confirm the issue but do not provide a confirmed patch or fix. P...

CVE-2002-1847

CVE-2002-1847 concerns a buffer overflow in mplay32.exe of Microsoft Windows Media Player (versions 6.3–7.1). The vulnerability is triggered by a long mp3 filename command line argument, potentially allowing a remote attacker to execute arbitrary commands. The initial description notes that the o...

CVE-2005-1574

CVE-2005-1574 affects Windows Media Player versions 9 and 10, where WMDRM-protected content could redirect users to a licensing Web site even if the auto-license setting is disabled. The connected sources describe the impact as a license-redirect vulnerability within WMDRM, but do not provide dee...

CVE-2003-1107

Technical details about CVE-2003-1107 are not publicly provided in the supplied documents. Monitor for updates from official advisories or vendor advisories.

CVE-2003-0604

The CVE-2003-0604 entry concerns Windows Media Player 7 and 8 running within Internet Explorer (and other HTML-processing Microsoft products) that process an HTML iframe. The vulnerability arises when an IFRAME tag pointing to an ASF file with a Content-location containing a File:// URL bypasses ...

CVE-2002-0340

CVE-2002-0340 concerns Windows Media Player (WMP) 8.00.00.4477 and potentially other versions, where the player can automatically detect and execute .wmf and similar content even if the file extension or content type does not indicate .wmf. This behavior could enable attackers to trigger unauthor...