Windows Media Player (Microsoft) - vulnerabilities (CVEs)

53 CVEs, 0 in the last 30 days, 23 known versions, newest CVE from 2017-11-15. Vendor: Microsoft.

CVEs of Windows Media Player

CVE-2017-11768 - CVSS 2.5 (low), 2017-11-15: Windows Media Player in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607,…
CVE-2015-1728 - CVSS 9.3 (critical), 2015-06-10: Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "Windows Media…
CVE-2014-2671 - CVSS 6.8 (medium), 2014-03-31: Microsoft Windows Media Player (WMP) 11.0.5721.5230 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified…
CVE-2013-3127 - CVSS 9.3 (critical), 2013-07-10: The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Format Runtime 11 and…
CVE-2010-2745 - CVSS 9.3 (critical), 2010-10-13: Microsoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action, which allows user-assisted remote…
CVE-2010-3138 - CVSS 9.3 (critical), 2010-08-27: Untrusted search path vulnerability in the Indeo Codec in iac25_32.ax in Microsoft Windows XP SP3 allows local users to gain privileges via a Trojan horse…
CVE-2010-0268 - CVSS 9.3 (critical), 2010-04-14: Unspecified vulnerability in the Windows Media Player ActiveX control in Windows Media Player (WMP) 9 on Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows…
CVE-2010-1042 - CVSS 4.3 (medium), 2010-03-23: Microsoft Windows Media Player 11 does not properly perform colorspace conversion, which allows remote attackers to cause a denial of service (memory…
CVE-2010-0718 - CVSS 4.3 (medium), 2010-02-26: Buffer overflow in Microsoft Windows Media Player 9 and 11.0.5721.5145 allows remote attackers to cause a denial of service (divide-by-zero error and…
CVE-2009-4309 - CVSS 9.3 (critical), 2009-12-13: Heap-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows…
CVE-2009-2527 - CVSS 9.3 (critical), 2009-10-14: Heap-based buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via (1) a crafted ASF file or (2) crafted…
CVE-2009-2525 - CVSS 9.3 (critical), 2009-10-14: Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not…
CVE-2009-0555 - CVSS 9.3 (critical), 2009-10-14: Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not…
CVE-2009-1331 - CVSS 9.3 (critical), 2009-04-17: Integer overflow in Microsoft Windows Media Player (WMP) 11.0.5721.5260 allows remote attackers to cause a denial of service (application crash) via a crafted…
CVE-2008-5745 - CVSS 4.3 (medium), 2008-12-29: Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, including 11.0.5721.5260, allows remote…
CVE-2008-3010 - CVSS 10 (critical), 2008-12-10: Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1 and 9 incorrectly associate ISATAP addresses…
CVE-2008-3009 - CVSS 10 (critical), 2008-12-10: Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service…
CVE-2008-4927 - CVSS 4.3 (medium), 2008-11-04: Microsoft Windows Media Player (WMP) 9.0 through 11 allows user-assisted attackers to cause a denial of service (application crash) via a malformed (1) MIDI…
CVE-2008-2253 - CVSS 9.3 (critical), 2008-09-11: Unspecified vulnerability in Microsoft Windows Media Player 11 allows remote attackers to execute arbitrary code via a crafted audio-only file that is…
CVE-2007-6401 - CVSS 9.3 (critical), 2007-12-17: Stack-based buffer overflow in mplayer2.exe in Microsoft Windows Media Player (WMP) 6.4, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers…
CVE-2007-6236 - CVSS 5 (medium), 2007-12-04: Microsoft Windows Media Player (WMP) allows remote attackers to cause a denial of service (application crash) via a certain AIFF file that triggers a…
CVE-2007-5095 - CVSS 7.5 (high), 2007-09-26: Microsoft Windows Media Player (WMP) 9 on Windows XP SP2 invokes Internet Explorer to render HTML documents contained inside some media files, regardless of…
CVE-2007-3037 - CVSS 4 (medium), 2007-08-14: Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafted header…
CVE-2007-3035 - CVSS 7.6 (high), 2007-08-14: Unspecified vulnerability in Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD)…
CVE-2007-4288 - CVSS 4.3 (medium), 2007-08-09: Microsoft Windows Media Player 11 (wmplayer.exe) allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted .au file…
CVE-2006-4702 - CVSS 6.8 (medium), 2006-12-13: Buffer overflow in the Windows Media Format Runtime in Microsoft Windows Media Player (WMP) 6.4 and Windows XP SP2, Server 2003, and Server 2003 SP1 allows…
CVE-2006-6134 - CVSS 7.5 (high), 2006-11-28: Heap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Microsoft Windows Media Player (WMP) 10.00.00.4036 on Windows XP SP2, Server…
CVE-2006-0025 - CVSS 9.3 (critical), 2006-06-13: Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to execute arbitrary code via a PNG image with a large chunk…
CVE-2006-0006 - CVSS 9.3 (critical), 2006-02-14: Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Windows 2000 SP4 and…
CVE-2005-2128 - CVSS 5 (medium), 2005-10-12: QUARTZ.DLL in Microsoft Windows Media Player 9 allows remote attackers to write a null byte to arbitrary memory via an AVI file with a crafted strn element…
CVE-2005-1574 - CVSS 7.5 (high), 2005-05-14: Windows Media Player 9 and 10, in certain cases, allows content protected by Windows Media Digital Rights Management (WMDRM) to redirect the user to a web…
CVE-2004-1325 - CVSS 5 (medium), 2004-12-18: The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file…
CVE-2004-1324 - CVSS 2.6 (low), 2004-12-18: The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1)…
CVE-2004-0597 - CVSS 10 (critical), 2004-11-23: Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images…
CVE-2004-1244 - CVSS 7.5 (high), 2004-02-08: Windows Media Player 9 allows remote attackers to execute arbitrary code via a PNG file containing large (1) width or (2) height values, aka the "PNG…
CVE-2003-1107 - CVSS 5.1 (medium), 2003-12-31: The DHTML capability in Microsoft Windows Media Player (WMP) 6.4, 7.0, 7.1, and 9 may run certain URL commands from a security zone that is less trusted than…
CVE-2003-0604 - CVSS 7.5 (high), 2003-08-27: Windows Media Player (WMP) 7 and 8, as running on Internet Explorer and possibly other Microsoft products that process HTML, allows remote attackers to bypass…
CVE-2003-0348 - CVSS 6.4 (medium), 2003-07-24: A certain Microsoft Windows Media Player 9 Series ActiveX control allows remote attackers to view and manipulate the Media Library on the local system via…
CVE-2003-0228 - CVSS 7.5 (high), 2003-05-27: Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to execute arbitrary…
CVE-2002-1847 - CVSS 7.5 (high), 2002-12-31: Buffer overflow in mplay32.exe of Microsoft Windows Media Player (WMP) 6.3 through 7.1 allows remote attackers to execute arbitrary commands via a long mp3…
CVE-2002-1844 - CVSS 7.8 (high), 2002-12-31: Microsoft Windows Media Player (WMP) 6.3, when installed on Solaris, installs executables with world-writable permissions, which allows local users to delete…
CVE-2002-0373 - CVSS 7.2 (high), 2002-07-03: The Windows Media Device Manager (WMDM) Service in Microsoft Windows Media Player 7.1 on Windows 2000 systems allows local users to obtain LocalSystem rights…
CVE-2002-0372 - CVSS 7.5 (high), 2002-07-03: Microsoft Windows Media Player versions 6.4 and 7.1 and Media Player for Windows XP allow remote attackers to bypass Internet Explorer's (IE) security…
CVE-2002-0340 - CVSS 7.5 (high), 2002-06-25: Windows Media Player (WMP) 8.00.00.4477, and possibly other versions, automatically detects and executes .wmf and other content, even when the file's…
CVE-2001-0719 - CVSS 7.5 (high), 2001-12-06: Buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via a malformed Advanced Streaming Format (ASF) file.
CVE-2001-0541 - CVSS 7.5 (high), 2001-09-20: Buffer overflow in Microsoft Windows Media Player 7.1 and earlier allows remote attackers to execute arbitrary commands via a malformed Windows Media Station…
CVE-2001-0242 - CVSS 7.5 (high), 2001-06-27: Buffer overflows in Microsoft Windows Media Player 7 and earlier allow remote attackers to execute arbitrary commands via (1) a long version tag in an .ASX…
CVE-2001-0243 - CVSS 5 (medium), 2001-06-27: Windows Media Player 7 and earlier stores Internet shortcuts in a user's Temporary Files folder with a fixed filename instead of in the Internet Explorer…
CVE-2001-0148 - CVSS 7.5 (high), 2001-06-02: The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via javascript URLs, a variant of the…
CVE-2001-0137 - CVSS 5.1 (medium), 2001-03-12: Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a skin file named…
CVE-2000-1113 - CVSS 7.5 (high), 2001-01-09: Buffer overflow in Microsoft Windows Media Player allows remote attackers to execute arbitrary commands via a malformed Active Stream Redirector (.ASX) file,…
CVE-2000-1112 - CVSS 4.6 (medium), 2001-01-09: Microsoft Windows Media Player 7 executes scripts in custom skin (.WMS) files, which could allow remote attackers to gain privileges via a skin that contains…
CVE-2000-0929 - CVSS 5 (medium), 2000-12-19: Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that is not closed…