PT-2001-1371 · Microsoft · Windows Media Player+1

Publicado 2001-03-12 · Atualizado 2018-10-12 · CVE-2001-0137

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Windows Media Player version 7

Description: The issue allows remote attackers to execute malicious Java applets in Internet Explorer clients. This is achieved by enclosing the applet in a skin file named skin.wmz, then referencing that skin in the codebase parameter to an applet tag.

Recommendations: For Windows Media Player version 7, consider disabling the execution of Java applets from skin files as a temporary workaround until a patch is available. Restrict access to the skin.wmz file to minimize the risk of exploitation. Avoid using the codebase parameter in applet tags to reference skins from untrusted sources.

Exploit

Correção

Identificadores relacionados

CVE-2001-0137

Produtos afetados

Internet Explorer

Windows Media Player

Referências · 6

• 🔥 https://exploit-db.com/exploits/20553 · Exploit
• 🔥 http://securityfocus.com/bid/2203 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5937 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-010 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=97958100816503&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0137 · Nota de Segurança