PT-2001-1371 · Microsoft · Windows Media Player+1

Published 2001-03-12 · Updated 2018-10-12 · CVE-2001-0137

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Windows Media Player version 7

Description: The issue allows remote attackers to execute malicious Java applets in Internet Explorer clients. This is achieved by enclosing the applet in a skin file named skin.wmz, then referencing that skin in the codebase parameter to an applet tag.

Recommendations: For Windows Media Player version 7, consider disabling the execution of Java applets from skin files as a temporary workaround until a patch is available. Restrict access to the skin.wmz file to minimize the risk of exploitation. Avoid using the codebase parameter in applet tags to reference skins from untrusted sources.

Exploit

Fix

Related Identifiers

CVE-2001-0137

Affected Products

Internet Explorer

Windows Media Player

References · 6

• 🔥 https://exploit-db.com/exploits/20553 · Exploit
• 🔥 http://securityfocus.com/bid/2203 · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-010 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0137 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5937 · Note
• http://marc.info/?l=bugtraq&m=97958100816503&w=2 · Note