Microsoft windows_media_player 7.1
Approved changes feed: RSS · Atom
cpe:2.3:a:microsoft:windows_media_player:7.1:*:*:*:*:*:*:*
part: a version: 7.1 update: *
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | Windows Media Player (982bf8a8-b58a-548c-90a9-a30b433ce869) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2007-3037 |
vulnerable | 2026-06-08 04:49:46.710885 |
Details available
Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafted header information that causes a size mismatch between compressed and decompressed data and triggers a heap-based buffer overflow, aka "Windows Media Player Code Execution Vulnerability Parsing Skins."
Published: 2007-08-14T21:00:00.000Z
Updated: 2024-08-07T13:57:54.935Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-3035 |
vulnerable | 2026-06-08 04:49:46.704995 |
Details available
Unspecified vulnerability in Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafted header information that is not properly handled during decompression, aka "Windows Media Player Code Execution Vulnerability Decompressing Skins."
Published: 2007-08-14T21:00:00.000Z
Updated: 2024-08-07T13:57:54.965Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0006 |
vulnerable | 2026-06-08 04:48:45.614568 |
Details available
Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Windows 2000 SP4 and XP SP1, and Media Player 10 on XP SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted bitmap (.BMP) file that specifies a size of 0 but contains additional data.
Published: 2006-02-14T22:00:00.000Z
Updated: 2024-08-07T16:18:20.729Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-1107 |
vulnerable | 2026-06-08 04:47:23.338332 |
Details available
The DHTML capability in Microsoft Windows Media Player (WMP) 6.4, 7.0, 7.1, and 9 may run certain URL commands from a security zone that is less trusted than the current zone, which allows attackers to bypass intended access restrictions.
Published: 2005-03-11T05:00:00.000Z
Updated: 2024-08-08T02:12:36.021Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0228 |
vulnerable | 2026-06-08 04:47:21.080422 |
Details available
Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to execute arbitrary code via a skins file with a URL containing hex-encoded backslash characters (%5C) that causes an executable to be placed in an arbitrary location.
Published: 2003-05-08T04:00:00.000Z
Updated: 2024-08-08T01:43:36.111Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-1847 |
vulnerable | 2026-06-08 04:47:18.314673 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0373 |
vulnerable | 2026-06-08 04:46:21.316866 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0372 |
vulnerable | 2026-06-08 04:46:21.316509 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.