CVE-2001-0137 Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a skin file named skin.wmz, then referencing that skin in the c...
MediumCVSS 5.1
EPSS 22.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a skin file named skin.wmz, then referencing that skin in the codebase parameter to an applet tag, aka the Windows Media Player Skins File Download" vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows media player | = 7 | No fix listed |
References
- 20010115 Windows Media Player 7 and IE java vulnerability - executing arbitrary programs mailing-list
- 2203 exploit patch vdb-entry vendor-advisory
- MS01-010 vendor-advisory
- win-mediaplayer-arbitrary-code(5937) vdb-entry