Description
Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to execute arbitrary code via a skins file with a URL containing hex-encoded backslash characters (%5C) that causes an executable to be placed in an arbitrary location.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Microsoft Windows Media Player 7.1 - Skin File Code Execution EDB-22570 · remote · May 7, 2003 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 20030507 Windows Media Player directory traversal vulnerability mailing-list
- 7517 vdb-entry
- 20030507 Windows Media Player directory traversal vulnerability mailing-list
- mediaplayer-skin-code-execution(11953) vdb-entry
- oval:org.mitre.oval:def:321 vdb-entry signature
- VU#384932 third-party-advisory
- 20030508 why i love xs4all + mediaplayer thingie mailing-list
- MS03-017 vendor-advisory