Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Windows Media Player
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2002-0340 1 Microsoft 1 Windows Media Player 2016-10-18 7.5 HIGH N/A
Windows Media Player (WMP) 8.00.00.4477, and possibly other versions, automatically detects and executes .wmf and other content, even when the file's extension or content type does not specify .wmf, which could make it easier for attackers to conduct unauthorized activities via Trojan horse files containing .wmf content.
CVE-2008-4927 1 Microsoft 1 Windows Media Player 2008-11-05 4.3 MEDIUM N/A
Microsoft Windows Media Player (WMP) 9.0 through 11 allows user-assisted attackers to cause a denial of service (application crash) via a malformed (1) MIDI or (2) DAT file, related to "MThd Header Parsing." NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2002-1844 1 Microsoft 1 Windows Media Player 2008-09-05 7.2 HIGH N/A
Microsoft Windows Media Player (WMP) 6.3, when installed on Solaris, installs executables with world-writable permissions, which allows local users to delete or modify the executables to gain privileges.