Unscored CVE-2007-3035 EUVD-2007-3027GHSA-84x4-866j-6jxg

Unspecified vulnerability in Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin…

Published Aug 14, 2007 · Updated Aug 7, 2024 · Assigned by microsoft

Description

Unspecified vulnerability in Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafted header information that is not properly handled during decompression, aka "Windows Media Player Code Execution Vulnerability Decompressing Skins."

References

25305 vdb-entry
oval:org.mitre.oval:def:1352 vdb-entry signature
TA07-226A third-party-advisory
26433 third-party-advisory
http://www.zerodayinitiative.com/advisories/ZDI-07-047.html
1018565 vdb-entry
MS07-047 vendor-advisory
20070814 ZDI-07-047: Microsoft Windows Media Player Malformed Skin Header Code Execution Vulnerability mailing-list
win-mediaplayer-skin-header-code-execution(35895) vdb-entry
ADV-2007-2871 vdb-entry