Lucene search

K
MicrosoftWindows Media Player

53 matches found

CVE
CVE
added 2010/04/14 4:0 p.m.137 views

CVE-2010-0268

Unspecified vulnerability in the Windows Media Player ActiveX control in Windows Media Player (WMP) 9 on Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows remote attackers to execute arbitrary code via crafted media content, aka "Media Player Remote Code Execution Vulnerability."

9.3CVSS8AI score0.6115EPSS
CVE
CVE
added 2008/09/11 1:10 a.m.123 views

CVE-2008-2253

Unspecified vulnerability in Microsoft Windows Media Player 11 allows remote attackers to execute arbitrary code via a crafted audio-only file that is streamed from a Server-Side Playlist (SSPL) on Windows Media Server, aka "Windows Media Player Sampling Rate Vulnerability."

9.3CVSS7.2AI score0.45862EPSS
CVE
CVE
added 2010/08/27 7:0 p.m.122 views

CVE-2010-3138

Untrusted search path vulnerability in the Indeo Codec in iac25_32.ax in Microsoft Windows XP SP3 allows local users to gain privileges via a Trojan horse iacenc.dll file in the current working directory, as demonstrated by access through BS.Player or Media Player Classic to a directory that contai...

9.3CVSS6.5AI score0.44893EPSS
CVE
CVE
added 2006/06/13 7:6 p.m.114 views

CVE-2006-0025

Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to execute arbitrary code via a PNG image with a large chunk size.

9.3CVSS7.6AI score0.71517EPSS
CVE
CVE
added 2007/12/17 6:46 p.m.112 views

CVE-2007-6401

Stack-based buffer overflow in mplayer2.exe in Microsoft Windows Media Player (WMP) 6.4, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers to execute arbitrary code via a certain .mp4 file, possibly a related issue to CVE-2007-6402.

9.3CVSS8AI score0.56243EPSS
CVE
CVE
added 2004/11/23 5:0 a.m.107 views

CVE-2004-0597

Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or the (2) png_handle_sBI...

10CVSS7.5AI score0.84316EPSS
CVE
CVE
added 2017/11/15 3:29 a.m.88 views

CVE-2017-11768

Windows Media Player in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows remote attackers to test for the presence of files on disk via a s...

2.5CVSS5AI score0.01474EPSS
CVE
CVE
added 2005/02/08 5:0 a.m.64 views

CVE-2004-1244

Windows Media Player 9 allows remote attackers to execute arbitrary code via a PNG file containing large (1) width or (2) height values, aka the "PNG Processing Vulnerability."

7.5CVSS7.5AI score0.42545EPSS
CVE
CVE
added 2009/10/14 10:30 a.m.61 views

CVE-2009-0555

Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly process Advanced Systems Format (ASF) files, which allows remote attackers to execute arbitrary code via a crafted audio file that uses t...

9.3CVSS7.2AI score0.4115EPSS
CVE
CVE
added 2009/10/14 10:30 a.m.57 views

CVE-2009-2525

Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly initialize unspecified functions within compressed audio files, which allows remote attackers to execute arbitrary code via (1) a crafted...

9.3CVSS7.4AI score0.38234EPSS
CVE
CVE
added 2015/06/10 1:59 a.m.53 views

CVE-2015-1728

Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "Windows Media Player RCE via DataObject Vulnerability."

9.3CVSS7.6AI score0.26887EPSS
CVE
CVE
added 2010/10/13 7:0 p.m.52 views

CVE-2010-2745

Microsoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action, which allows user-assisted remote attackers to execute arbitrary code via crafted media content referenced in an HTML document, aka "Windows Media Player Memory Corruption Vulnerab...

9.3CVSS7.4AI score0.58741EPSS
CVE
CVE
added 2006/11/28 1:7 a.m.51 views

CVE-2006-6134

Heap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Microsoft Windows Media Player (WMP) 10.00.00.4036 on Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long HREF at...

7.5CVSS7.8AI score0.69203EPSS
CVE
CVE
added 2006/02/14 10:6 p.m.49 views

CVE-2006-0006

Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Windows 2000 SP4 and XP SP1, and Media Player 10 on XP SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted bitmap (.BMP) file that specifi...

9.3CVSS7.7AI score0.739EPSS
CVE
CVE
added 2009/12/13 1:30 a.m.48 views

CVE-2009-4309

Heap-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a large size value in a movi record in an IV41 stream in a media file, as demonstrated by an AVI fi...

9.3CVSS7.9AI score0.27797EPSS
CVE
CVE
added 2010/02/26 7:30 p.m.48 views

CVE-2010-0718

Buffer overflow in Microsoft Windows Media Player 9 and 11.0.5721.5145 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted .mpg file.

4.3CVSS6.9AI score0.28822EPSS
CVE
CVE
added 2001/01/22 5:0 a.m.46 views

CVE-2000-1113

Buffer overflow in Microsoft Windows Media Player allows remote attackers to execute arbitrary commands via a malformed Active Stream Redirector (.ASX) file, aka the ".ASX Buffer Overrun" vulnerability.

7.5CVSS7.7AI score0.13873EPSS
CVE
CVE
added 2006/12/13 1:28 a.m.46 views

CVE-2006-4702

Buffer overflow in the Windows Media Format Runtime in Microsoft Windows Media Player (WMP) 6.4 and Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.

6.8CVSS7.6AI score0.55346EPSS
CVE
CVE
added 2009/04/17 2:30 p.m.46 views

CVE-2009-1331

Integer overflow in Microsoft Windows Media Player (WMP) 11.0.5721.5260 allows remote attackers to cause a denial of service (application crash) via a crafted .mid file, as demonstrated by crash.mid.

9.3CVSS6.9AI score0.22381EPSS
CVE
CVE
added 2007/08/14 9:17 p.m.45 views

CVE-2007-3037

Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafted header information that causes a size mismatch between compressed and decompressed data and triggers a heap-based buffer overflow, aka "Windows Media Player ...

4CVSS7.5AI score0.59741EPSS
CVE
CVE
added 2008/12/10 2:0 p.m.44 views

CVE-2008-3009

Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name (SPN) identifier when validating replies to authentication requests, which allows remote servers to execute arbitrary code via ...

10CVSS7.6AI score0.41884EPSS
CVE
CVE
added 2005/01/06 5:0 a.m.43 views

CVE-2004-1324

The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer.

2.6CVSS7.6AI score0.16718EPSS
CVE
CVE
added 2005/10/12 1:4 p.m.43 views

CVE-2005-2128

QUARTZ.DLL in Microsoft Windows Media Player 9 allows remote attackers to write a null byte to arbitrary memory via an AVI file with a crafted strn element with a modified length value.

5CVSS6.6AI score0.45067EPSS
CVE
CVE
added 2008/11/04 9:0 p.m.43 views

CVE-2008-4927

Microsoft Windows Media Player (WMP) 9.0 through 11 allows user-assisted attackers to cause a denial of service (application crash) via a malformed (1) MIDI or (2) DAT file, related to "MThd Header Parsing." NOTE: the provenance of this information is unknown; the details are obtained solely from t...

4.3CVSS6.2AI score0.25024EPSS
CVE
CVE
added 2008/12/29 3:24 p.m.43 views

CVE-2008-5745

Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, including 11.0.5721.5260, allows remote attackers to cause a denial of service (application crash) via a crafted (1) WAV, (2) SND, or (3) MID file. NOTE: this has been incorrectly repor...

4.3CVSS6.7AI score0.44318EPSS
CVE
CVE
added 2003/05/27 4:0 a.m.41 views

CVE-2003-0228

Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to execute arbitrary code via a skins file with a URL containing hex-encoded backslash characters (%5C) that causes an executable to be placed in an arbitrary loca...

7.5CVSS7.6AI score0.72221EPSS
CVE
CVE
added 2007/08/14 9:17 p.m.41 views

CVE-2007-3035

Unspecified vulnerability in Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafted header information that is not properly handled during decompression, aka "Windows Media Player Code Execution Vulnerability Dec...

7.6CVSS7.4AI score0.52084EPSS
CVE
CVE
added 2007/08/09 9:17 p.m.41 views

CVE-2007-4288

Microsoft Windows Media Player 11 (wmplayer.exe) allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted .au file that triggers a divide-by-zero error, as demonstrated by iapetus.au.

4.3CVSS6.5AI score0.50695EPSS
CVE
CVE
added 2010/03/23 12:53 a.m.41 views

CVE-2010-1042

Microsoft Windows Media Player 11 does not properly perform colorspace conversion, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .AVI file. NOTE: the provenance of this information is unknown; the details are obtained...

4.3CVSS8.1AI score0.41642EPSS
CVE
CVE
added 2013/07/10 3:46 a.m.41 views

CVE-2013-3127

The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Format Runtime 11 and Windows Media Player 11 and 12 allows remote attackers to execute arbitrary code via a crafted media file, aka "WMV Video Decoder Remote Code ...

9.3CVSS8AI score0.45344EPSS
CVE
CVE
added 2002/03/09 5:0 a.m.40 views

CVE-2001-0719

Buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via a malformed Advanced Streaming Format (ASF) file.

7.5CVSS8.2AI score0.17152EPSS
CVE
CVE
added 2014/03/31 2:58 p.m.40 views

CVE-2014-2671

Microsoft Windows Media Player (WMP) 11.0.5721.5230 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted WAV file.

6.8CVSS7.6AI score0.30873EPSS
CVE
CVE
added 2001/01/22 5:0 a.m.39 views

CVE-2000-0929

Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that is not closed properly, aka the "OCX Attachment" vulnerability.

5CVSS6.8AI score0.18787EPSS
CVE
CVE
added 2003/08/27 4:0 a.m.39 views

CVE-2003-0604

Windows Media Player (WMP) 7 and 8, as running on Internet Explorer and possibly other Microsoft products that process HTML, allows remote attackers to bypass zone restrictions and access or execute arbitrary files via an IFRAME tag pointing to an ASF file whose Content-location contains a File:// ...

7.5CVSS7.8AI score0.08386EPSS
CVE
CVE
added 2005/05/14 4:0 a.m.37 views

CVE-2005-1574

Windows Media Player 9 and 10, in certain cases, allows content protected by Windows Media Digital Rights Management (WMDRM) to redirect the user to a web site to obtain a license, even when the "Acquire licenses automatically for protected content" setting is not enabled.

7.5CVSS6.7AI score0.04077EPSS
CVE
CVE
added 2008/12/10 2:0 p.m.37 views

CVE-2008-3010

Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1 and 9 incorrectly associate ISATAP addresses with the Local Intranet zone, which allows remote servers to capture NTLM credentials, and execute arbitrary code through credential-reflectio...

10CVSS7.5AI score0.41884EPSS
CVE
CVE
added 2001/09/18 4:0 a.m.36 views

CVE-2001-0243

Windows Media Player 7 and earlier stores Internet shortcuts in a user's Temporary Files folder with a fixed filename instead of in the Internet Explorer cache, which causes the HTML in those shortcuts to run in the Local Computer Zone instead of the Internet Zone, which allows remote attackers to ...

5CVSS6.5AI score0.37007EPSS
CVE
CVE
added 2003/07/24 4:0 a.m.36 views

CVE-2003-0348

A certain Microsoft Windows Media Player 9 Series ActiveX control allows remote attackers to view and manipulate the Media Library on the local system via HTML script.

6.4CVSS6.3AI score0.27593EPSS
CVE
CVE
added 2009/10/14 10:30 a.m.36 views

CVE-2009-2527

Heap-based buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via (1) a crafted ASF file or (2) crafted streaming content, aka "WMP Heap Overflow Vulnerability."

9.3CVSS7.7AI score0.43397EPSS
CVE
CVE
added 2001/05/07 4:0 a.m.35 views

CVE-2001-0137

Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a skin file named skin.wmz, then referencing that skin in the codebase parameter to an applet tag, aka the Windows Media Player Skins File Download" vulnerability...

5.1CVSS7.3AI score0.07392EPSS
CVE
CVE
added 2001/06/02 4:0 a.m.35 views

CVE-2001-0148

The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via javascript URLs, a variant of the "Frame Domain Verification" vulnerability.

7.5CVSS7.5AI score0.13664EPSS
CVE
CVE
added 2002/03/09 5:0 a.m.35 views

CVE-2001-0541

Buffer overflow in Microsoft Windows Media Player 7.1 and earlier allows remote attackers to execute arbitrary commands via a malformed Windows Media Station (.NSC) file.

7.5CVSS8.1AI score0.09919EPSS
CVE
CVE
added 2003/04/02 5:0 a.m.35 views

CVE-2002-0372

Microsoft Windows Media Player versions 6.4 and 7.1 and Media Player for Windows XP allow remote attackers to bypass Internet Explorer's (IE) security mechanisms and run code via an executable .wma media file with a license installation requirement stored in the IE cache, aka the "Cache Path Disclo...

7.5CVSS6.7AI score0.07394EPSS
CVE
CVE
added 2003/04/02 5:0 a.m.35 views

CVE-2002-0373

The Windows Media Device Manager (WMDM) Service in Microsoft Windows Media Player 7.1 on Windows 2000 systems allows local users to obtain LocalSystem rights via a program that calls the WMDM service to connect to an invalid local storage device, aka "Privilege Elevation through Windows Media Devic...

7.2CVSS6.1AI score0.01714EPSS
CVE
CVE
added 2005/06/28 4:0 a.m.35 views

CVE-2002-1844

Microsoft Windows Media Player (WMP) 6.3, when installed on Solaris, installs executables with world-writable permissions, which allows local users to delete or modify the executables to gain privileges.

7.8CVSS6.9AI score0.00482EPSS
CVE
CVE
added 2005/06/28 4:0 a.m.35 views

CVE-2002-1847

Buffer overflow in mplay32.exe of Microsoft Windows Media Player (WMP) 6.3 through 7.1 allows remote attackers to execute arbitrary commands via a long mp3 filename command line argument. NOTE: since the only known attack vector requires command line access, this may not be a vulnerability.

7.5CVSS8.1AI score0.05575EPSS
CVE
CVE
added 2007/09/26 10:17 p.m.35 views

CVE-2007-5095

Microsoft Windows Media Player (WMP) 9 on Windows XP SP2 invokes Internet Explorer to render HTML documents contained inside some media files, regardless of what default web browser is configured, which might allow remote attackers to exploit vulnerabilities in software that the user does not expec...

7.5CVSS6.6AI score0.27428EPSS
CVE
CVE
added 2001/06/27 4:0 a.m.34 views

CVE-2001-0242

Buffer overflows in Microsoft Windows Media Player 7 and earlier allow remote attackers to execute arbitrary commands via (1) a long version tag in an .ASX file, or (2) a long banner tag, a variant of the ".ASX Buffer Overrun" vulnerability as discussed in MS:MS00-090.

7.5CVSS7.6AI score0.12666EPSS
CVE
CVE
added 2005/03/11 5:0 a.m.34 views

CVE-2003-1107

The DHTML capability in Microsoft Windows Media Player (WMP) 6.4, 7.0, 7.1, and 9 may run certain URL commands from a security zone that is less trusted than the current zone, which allows attackers to bypass intended access restrictions.

5.1CVSS7.1AI score0.08431EPSS
CVE
CVE
added 2005/01/06 5:0 a.m.34 views

CVE-2004-1325

The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote attackers to determine the existence of files on the local system.

5CVSS6.9AI score0.44547EPSS
Total number of security vulnerabilities53