Microsoft

Windows Media Player

53 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
2.5

CVE-2017-11768

  • EPSS 6.4%
  • Veröffentlicht 15.11.2017 03:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Windows Media Player in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows remote attackers ...

9.3

CVE-2015-1728

  • EPSS 17.68%
  • Veröffentlicht 10.06.2015 01:59:09
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "Windows Media Player RCE via DataObject Vulnerability."

6.8

CVE-2014-2671

Exploit
  • EPSS 46.29%
  • Veröffentlicht 31.03.2014 14:58:57
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Microsoft Windows Media Player (WMP) 11.0.5721.5230 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted WAV file.

9.3

CVE-2013-3127

  • EPSS 21.91%
  • Veröffentlicht 10.07.2013 03:46:09
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Format Runtime 11 and Windows Media Player 11 and 12 allows remote attackers to execute arbitrary code via a crafte...

9.3

CVE-2010-2745

  • EPSS 24.25%
  • Veröffentlicht 13.10.2010 19:00:44
  • Zuletzt bearbeitet 16.06.2026 23:21:25

Microsoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action, which allows user-assisted remote attackers to execute arbitrary code via crafted media content referenced in an HTML document, aka...

9.3

CVE-2010-3138

Exploit
  • EPSS 26.69%
  • Veröffentlicht 27.08.2010 19:00:01
  • Zuletzt bearbeitet 16.06.2026 23:22:13

Untrusted search path vulnerability in the Indeo Codec in iac25_32.ax in Microsoft Windows XP SP3 allows local users to gain privileges via a Trojan horse iacenc.dll file in the current working directory, as demonstrated by access through BS.Player o...

9.3

CVE-2010-0268

  • EPSS 20.12%
  • Veröffentlicht 14.04.2010 16:00:01
  • Zuletzt bearbeitet 16.06.2026 23:15:49

Unspecified vulnerability in the Windows Media Player ActiveX control in Windows Media Player (WMP) 9 on Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows remote attackers to execute arbitrary code via crafted media content, aka "Media Player Remo...

4.3

CVE-2010-1042

Exploit
  • EPSS 10.34%
  • Veröffentlicht 23.03.2010 00:53:22
  • Zuletzt bearbeitet 16.06.2026 23:17:24

Microsoft Windows Media Player 11 does not properly perform colorspace conversion, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .AVI file. NOTE: the provenance of thi...

4.3

CVE-2010-0718

Exploit
  • EPSS 8.87%
  • Veröffentlicht 26.02.2010 19:30:00
  • Zuletzt bearbeitet 16.06.2026 23:16:42

Buffer overflow in Microsoft Windows Media Player 9 and 11.0.5721.5145 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted .mpg file.

9.3

CVE-2009-4309

  • EPSS 24.11%
  • Veröffentlicht 13.12.2009 01:30:00
  • Zuletzt bearbeitet 16.06.2026 23:13:25

Heap-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a large size value in a movi record in an IV41 str...