Home  >  CVE-2003-1107
CVE Details for CVE: CVE-2003-1107
Summary
The DHTML capability in Microsoft Windows Media Player (WMP) 6.4, 7.0, 7.1, and 9 may run certain URL commands from a security zone that is less trusted than the current zone, which allows attackers to bypass intended access restrictions.
Timestamps
Last major update 11-07-2017 - 01:29
Published 31-12-2003 - 05:00
Last modified 11-07-2017 - 01:29
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:windows_media_player:7:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:windows_media_player:7:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:windows_media_player:7.1:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:windows_media_player:7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:windows_media_player:6.4:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:windows_media_player:6.4:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:windows_media_player:9:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:windows_media_player:9:*:*:*:*:*:*:*
CAPEC
Click the CAPEC title to display a description
CWE
NVD-CWE-Other
CVSS
Base
5.1
Impact
6.4
Exploitability
4.9
Access
VectorComplexityAuthentication
NETWORK HIGH NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
CVSS3
None
VIA4 references
cvss-vector via4
AV:N/AC:H/Au:N/C:P/I:P/A:P
refmap via4
cert-vn VU#222044
mskb 828026
xf mediaplayer-dhtml-code-execution(13375)