Microsoft

Windows Media Player

53 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
2.5

CVE-2017-11768

  • EPSS 1.35%
  • Published 15.11.2017 03:29:00
  • Last modified 20.04.2025 01:37:25

Windows Media Player in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows remote attackers ...

9.3

CVE-2015-1728

  • EPSS 26.89%
  • Published 10.06.2015 01:59:09
  • Last modified 12.04.2025 10:46:40

Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "Windows Media Player RCE via DataObject Vulnerability."

6.8

CVE-2014-2671

Exploit
  • EPSS 30.87%
  • Published 31.03.2014 14:58:57
  • Last modified 12.04.2025 10:46:40

Microsoft Windows Media Player (WMP) 11.0.5721.5230 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted WAV file.

9.3

CVE-2013-3127

  • EPSS 45.34%
  • Published 10.07.2013 03:46:09
  • Last modified 11.04.2025 00:51:21

The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Format Runtime 11 and Windows Media Player 11 and 12 allows remote attackers to execute arbitrary code via a crafte...

9.3

CVE-2010-2745

  • EPSS 59.69%
  • Published 13.10.2010 19:00:44
  • Last modified 11.04.2025 00:51:21

Microsoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action, which allows user-assisted remote attackers to execute arbitrary code via crafted media content referenced in an HTML document, aka...

9.3

CVE-2010-3138

Exploit
  • EPSS 48.1%
  • Published 27.08.2010 19:00:01
  • Last modified 11.04.2025 00:51:21

Untrusted search path vulnerability in the Indeo Codec in iac25_32.ax in Microsoft Windows XP SP3 allows local users to gain privileges via a Trojan horse iacenc.dll file in the current working directory, as demonstrated by access through BS.Player o...

9.3

CVE-2010-0268

  • EPSS 63.52%
  • Published 14.04.2010 16:00:01
  • Last modified 11.04.2025 00:51:21

Unspecified vulnerability in the Windows Media Player ActiveX control in Windows Media Player (WMP) 9 on Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows remote attackers to execute arbitrary code via crafted media content, aka "Media Player Remo...

4.3

CVE-2010-1042

Exploit
  • EPSS 41.64%
  • Published 23.03.2010 00:53:22
  • Last modified 11.04.2025 00:51:21

Microsoft Windows Media Player 11 does not properly perform colorspace conversion, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .AVI file. NOTE: the provenance of thi...

4.3

CVE-2010-0718

Exploit
  • EPSS 28.82%
  • Published 26.02.2010 19:30:00
  • Last modified 11.04.2025 00:51:21

Buffer overflow in Microsoft Windows Media Player 9 and 11.0.5721.5145 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted .mpg file.

9.3

CVE-2009-4309

  • EPSS 30.17%
  • Published 13.12.2009 01:30:00
  • Last modified 09.04.2025 00:30:58

Heap-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a large size value in a movi record in an IV41 str...