CVE-2008-2253

CVE-2008-2253 affects Windows Media Player 11. A remote code execution vulnerability exists when specially crafted audio-only files are streamed from a Windows Media Server SSPL, due to a buffer overflow in WMP11. Exploitation requires a user to open the crafted file; impact could be full system ...

CVE-2015-1728

CVE-2015-1728 affects Microsoft Windows Media Player 10–12. The root cause is improper handling of specially crafted DataObjects, enabling a remote attacker to execute arbitrary code when a user opens a crafted DataObject on a web page. The vulnerability is remote-code-execution with high impact,...

CVE-2007-3037

CVE-2007-3037 is a Windows Media Player skin parsing code execution vulnerability. It stems from header handling in skin files (WMZ/WMD), causing a size mismatch between compressed and decompressed data and resulting in a heap-based buffer overflow. Affects Windows Media Player versions 7.1, 9, 1...

CVE-2010-2745

CVE-2010-2745 is a Windows Media Player memory corruption vulnerability affecting WMP 9–12. It arises when Windows Media Player fails to deallocate objects during a browser reload, allowing a remote attacker to execute arbitrary code by convincing a user to visit a crafted web page. Exploitation ...

CVE-2013-3127

The CVE-2013-3127 issue affects the Windows Media Format Runtime components: wmv9vcm.dll, wmvdmod.dll (WMV9/9.5) and wmvdecod.dll (WMV11/WM Player 11/12). The underlying problem is a remote code execution vulnerability triggered by parsing crafted media files, enabling an attacker to run arbitrar...

CVE-2008-5745

Microsoft Windows Media Player (WMP) 9–11 suffers an integer overflow in quartz.dll (DirectShow) that can be triggered by crafted WAV, SND, or MID files, causing an application crash (DoS). This aligns with CVE-2008-5745; related entries exist for CVE-2008-4927. Technical details about impact vec...

CVE-2007-3035

CVE-2007-3035 is a remote code execution vulnerability in Windows Media Player skin handling. A boundary error when decompressing skin header data in WMZ/WMD skins could allow an attacker to execute arbitrary code on affected systems, with the attacker gaining the same privileges as the logged-in...

CVE-2008-4927

CVE-2008-4927 affects Microsoft Windows Media Player (WMP) 9.0 through 11. The vulnerability is a denial-of-service condition caused by parsing errors in MIDI or DAT files, specifically related to the MThd Header Parsing . It allows a user-assisted attacker to crash the application. The available...

CVE-2010-1042

Microsoft Windows Media Player 11 is affected by CVE-2010-1042 due to an error in colorspace conversion when processing crafted .AVI files. The vulnerability can lead to a denial of service (memory corruption) and possibly arbitrary code execution. OpenVAS entries corroborate a Denial of Service ...

CVE-2007-4288

CVE-2007-4288 affects Microsoft Windows Media Player 11 (wmplayer.exe). The vulnerability is triggered by a crafted .au file that causes a divide-by-zero error, leading to an application crash (denial of service). The exploit relies on user-assisted interaction (opening or handling the crafted fi...

CVE-2007-6236

The vulnerability CVE-2007-6236 affects Microsoft Windows Media Player. Description: WMP can be remotely triggered by processing a specially crafted AIFF file (kr.aiff) to cause an application crash via a divide-by-zero error. Impact is a remote denial of service on affected WMP instances. No spe...