GCVE - cpe:2.3:a:microsoft:windows_media_player:11:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:windows_media_player:11:*:*:*:*:*:*:*

part: a version: 11 update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Windows Media Player (`982bf8a8-b58a-548c-90a9-a30b433ce869`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-1728`	vulnerable	2026-06-08 05:06:26.131496	Details available Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "Windows Media Player RCE via DataObject Vulnerability." Published: 2015-06-10T01:00:00.000Z Updated: 2024-08-06T04:54:16.271Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1032522 https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1200 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-057	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3127`	vulnerable	2026-06-08 05:04:30.170271	Details available The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Format Runtime 11 and Windows Media Player 11 and 12 allows remote attackers to execute arbitrary code via a crafted media file, aka "WMV Video Decoder Remote Code Execution Vulnerability." Published: 2013-07-10T01:00:00.000Z Updated: 2024-08-06T16:00:09.801Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-057 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16998 http://www.us-cert.gov/ncas/alerts/TA13-190A	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2745`	vulnerable	2026-06-08 04:55:09.872472	Details available Microsoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action, which allows user-assisted remote attackers to execute arbitrary code via crafted media content referenced in an HTML document, aka "Windows Media Player Memory Corruption Vulnerability." Published: 2010-10-13T18:00:00.000Z Updated: 2024-08-07T02:46:47.257Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6653 http://www.securitytracker.com/id?1024550 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-082 http://www.us-cert.gov/cas/techalerts/TA10-285A.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1042`	vulnerable	2026-06-08 04:54:04.746493	Details available Microsoft Windows Media Player 11 does not properly perform colorspace conversion, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .AVI file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Published: 2010-03-22T17:23:00.000Z Updated: 2024-08-07T01:06:52.572Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/57205 http://www.securityfocus.com/bid/38790	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5745`	vulnerable	2026-06-08 04:50:52.934235	Details available Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, including 11.0.5721.5260, allows remote attackers to cause a denial of service (application crash) via a crafted (1) WAV, (2) SND, or (3) MID file. NOTE: this has been incorrectly reported as a code-execution vulnerability. NOTE: it is not clear whether this issue is related to CVE-2008-4927. Published: 2008-12-29T15:00:00.000Z Updated: 2024-08-07T11:04:44.479Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1021495 http://www.securityfocus.com/archive/1/499579/100/0/threaded http://securityreason.com/securityalert/4823 https://exchange.xforce.ibmcloud.com/vulnerabilities/47664 http://www.securityfocus.com/bid/33018	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4927`	vulnerable	2026-06-08 04:50:48.655016	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2253`	vulnerable	2026-06-08 04:50:23.337609	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-6236`	vulnerable	2026-06-08 04:50:08.305585	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4288`	vulnerable	2026-06-08 04:49:56.033501	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-3037`	vulnerable	2026-06-08 04:49:46.710950	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-3035`	vulnerable	2026-06-08 04:49:46.706742	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.