Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:windows_media_player:10:*:*:*:*:*:*:*

part: a version: 10 update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductWindows Media Player (982bf8a8-b58a-548c-90a9-a30b433ce869)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-1728 vulnerable 2026-06-08 05:06:26.128310 Details available
Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "Windows Media Player RCE via DataObject Vulnerability."
Published: 2015-06-10T01:00:00.000Z
Updated: 2024-08-06T04:54:16.271Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2745 vulnerable 2026-06-08 04:55:09.869664 Details available
Microsoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action, which allows user-assisted remote attackers to execute arbitrary code via crafted media content referenced in an HTML document, aka "Windows Media Player Memory Corruption Vulnerability."
Published: 2010-10-13T18:00:00.000Z
Updated: 2024-08-07T02:46:47.257Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5745 vulnerable 2026-06-08 04:50:52.934207 Details available
Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, including 11.0.5721.5260, allows remote attackers to cause a denial of service (application crash) via a crafted (1) WAV, (2) SND, or (3) MID file. NOTE: this has been incorrectly reported as a code-execution vulnerability. NOTE: it is not clear whether this issue is related to CVE-2008-4927.
Published: 2008-12-29T15:00:00.000Z
Updated: 2024-08-07T11:04:44.479Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4927 vulnerable 2026-06-08 04:50:48.654493 Details available
Microsoft Windows Media Player (WMP) 9.0 through 11 allows user-assisted attackers to cause a denial of service (application crash) via a malformed (1) MIDI or (2) DAT file, related to "MThd Header Parsing." NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Published: 2008-11-04T20:00:00.000Z
Updated: 2024-09-16T19:00:56.815Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3037 vulnerable 2026-06-08 04:49:46.710930 Details available
Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafted header information that causes a size mismatch between compressed and decompressed data and triggers a heap-based buffer overflow, aka "Windows Media Player Code Execution Vulnerability Parsing Skins."
Published: 2007-08-14T21:00:00.000Z
Updated: 2024-08-07T13:57:54.935Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3035 vulnerable 2026-06-08 04:49:46.706091 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0025 vulnerable 2026-06-08 04:48:45.713552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0006 vulnerable 2026-06-08 04:48:45.615678 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1574 vulnerable 2026-06-08 04:48:26.964831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.