Unscored CVE-2003-1107 EUVD-2003-1097GHSA-r9v6-26x9-xcw6

The DHTML capability in Microsoft Windows Media Player (WMP) 6.4, 7.0, 7.1, and 9 may run certain URL commands from a security zone that is…

Published Mar 11, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

The DHTML capability in Microsoft Windows Media Player (WMP) 6.4, 7.0, 7.1, and 9 may run certain URL commands from a security zone that is less trusted than the current zone, which allows attackers to bypass intended access restrictions.

References

828026 vendor-advisory
VU#222044 third-party-advisory
mediaplayer-dhtml-code-execution(13375) vdb-entry