PT-2001-1472 · Microsoft · Windows Media Player

Publicado 2001-06-27 · Atualizado 2018-10-12 · CVE-2001-0243

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows Media Player versions 7 and earlier

Description The issue allows remote attackers to read certain files due to the way Windows Media Player stores Internet shortcuts. Specifically, it stores them in a user's Temporary Files folder with a fixed filename, instead of in the Internet Explorer cache. This causes the HTML in those shortcuts to run in the Local Computer Zone instead of the Internet Zone.

Recommendations For Windows Media Player versions 7 and earlier, consider restricting access to sensitive files as a temporary workaround until a patch is available. Avoid using Windows Media Player to open Internet shortcuts from untrusted sources.

Correção

Identificadores relacionados

CVE-2001-0243

Produtos afetados

Windows Media Player

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/6584 · Nota
• http://securityfocus.com/bid/2765 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-029 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-0243 · Nota de Segurança