CVE-2001-0137: Microsoft Windows Media Player

Medium severity, CVSS 5.1. EPSS: 22.2% chance of exploitation in the next 30 days.

Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a skin file named skin.wmz, then referencing that skin in the codebase parameter to an applet tag, aka the Windows Media Player Skins File Download" vulnerability.

Affected products

• Microsoft Windows Media Player: version 7 only

Published 2001-03-12. Last modified 2026-06-16.