CVE-2001-0148 The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via javascript URLs, a variant of the "Frame Domain Verification" vulnerability.
HighCVSS 7.5
EPSS 26.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via javascript URLs, a variant of the "Frame Domain Verification" vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows media player | = 7 | No fix listed |
References
- 20010101 Windows Media Player 7 and IE vulnerability - executing arbitrary programs exploit mailing-list patch vendor-advisory
- MS01-015 vendor-advisory
- media-player-execute-commands(6227) vdb-entry