Vulnerabilities > Microsoft > Windows Media Player > Medium

DATE CVE VULNERABILITY TITLE RISK
2003-07-24 CVE-2003-0348 Unspecified vulnerability in Microsoft Windows Media Player 9
A certain Microsoft Windows Media Player 9 Series ActiveX control allows remote attackers to view and manipulate the Media Library on the local system via HTML script.
network
low complexity
microsoft
6.4
2001-06-27 CVE-2001-0243 Unspecified vulnerability in Microsoft Windows Media Player 6.4/7
Windows Media Player 7 and earlier stores Internet shortcuts in a user's Temporary Files folder with a fixed filename instead of in the Internet Explorer cache, which causes the HTML in those shortcuts to run in the Local Computer Zone instead of the Internet Zone, which allows remote attackers to read certain files.
network
low complexity
microsoft
5.0
2001-03-12 CVE-2001-0137 Unspecified vulnerability in Microsoft Windows Media Player 7
Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a skin file named skin.wmz, then referencing that skin in the codebase parameter to an applet tag, aka the Windows Media Player Skins File Download" vulnerability.
network
high complexity
microsoft
5.1
2001-01-09 CVE-2000-1112 Unspecified vulnerability in Microsoft Windows Media Player 6.4/7
Microsoft Windows Media Player 7 executes scripts in custom skin (.WMS) files, which could allow remote attackers to gain privileges via a skin that contains a malicious script, aka the ".WMS Script Execution" vulnerability.
local
low complexity
microsoft
4.6
2000-12-19 CVE-2000-0929 Unspecified vulnerability in Microsoft Windows Media Player 7
Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that is not closed properly, aka the "OCX Attachment" vulnerability.
network
low complexity
microsoft
5.0