Description
Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that is not closed properly, aka the "OCX Attachment" vulnerability.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Microsoft Windows Media Player 7 - Embedded OCX Control EDB-20240 · remote · Sep 26, 2000 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- MS00-068 vendor-advisory
- 20000929 Malformed Embedded Windows Media Player 7 "OCX Attachment" mailing-list
- mediaplayer-outlook-dos(5309) vdb-entry
- 1714 vdb-entry