Microsoft Windows Media Player vulnerabilities

53 CVEs affecting Microsoft Windows Media Player, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-11768, published 2017-11-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-0597, published 2004-11-23. High severity, CVSS 10.0. EPSS: 81.9% chance of exploitation in the next 30 days. Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS…
CVE-2006-0006, published 2006-02-14. High severity, CVSS 9.3. EPSS: 49.6% chance of exploitation in the next 30 days. Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Windows 2000 SP4 and XP SP1, and Media Player 10 on XP SP1 and…
CVE-2006-0025, published 2006-06-13. High severity, CVSS 9.3. EPSS: 48.7% chance of exploitation in the next 30 days. Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to execute arbitrary code via a PNG image with a large chunk size.
CVE-2003-0228, published 2003-05-27. High severity, CVSS 7.5. EPSS: 46.3% chance of exploitation in the next 30 days. Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to execute arbitrary code via a skins file with a URL…
CVE-2014-2671, published 2014-03-31. Medium severity, CVSS 6.8. EPSS: 46.2% chance of exploitation in the next 30 days. Microsoft Windows Media Player (WMP) 11.0.5721.5230 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted WAV file.
CVE-2006-6134, published 2006-11-28. High severity, CVSS 7.5. EPSS: 42.1% chance of exploitation in the next 30 days. Heap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Microsoft Windows Media Player (WMP) 10.00.00.4036 on Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote…
CVE-2005-2128, published 2005-10-12. Medium severity, CVSS 5.0. EPSS: 40.5% chance of exploitation in the next 30 days. QUARTZ.DLL in Microsoft Windows Media Player 9 allows remote attackers to write a null byte to arbitrary memory via an AVI file with a crafted strn element with a modified length value.
CVE-2002-1847, published 2002-12-31. High severity, CVSS 7.5. EPSS: 33.6% chance of exploitation in the next 30 days. Buffer overflow in mplay32.exe of Microsoft Windows Media Player (WMP) 6.3 through 7.1 allows remote attackers to execute arbitrary commands via a long mp3 filename command line argument. NOTE: since…
CVE-2004-1244, published 2004-02-08. High severity, CVSS 7.5. EPSS: 33.2% chance of exploitation in the next 30 days. Windows Media Player 9 allows remote attackers to execute arbitrary code via a PNG file containing large (1) width or (2) height values, aka the "PNG Processing Vulnerability."
CVE-2001-0242, published 2001-06-27. High severity, CVSS 7.5. EPSS: 30% chance of exploitation in the next 30 days. Buffer overflows in Microsoft Windows Media Player 7 and earlier allow remote attackers to execute arbitrary commands via (1) a long version tag in an .ASX file, or (2) a long banner tag, a variant…

Latest

CVE-2017-11768, published 2017-11-15. Low severity, CVSS 2.5. EPSS: 6.7% chance of exploitation in the next 30 days. Windows Media Player in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and…
CVE-2015-1728, published 2015-06-10. High severity, CVSS 9.3. EPSS: 17.6% chance of exploitation in the next 30 days. Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "Windows Media Player RCE via DataObject Vulnerability."
CVE-2013-3127, published 2013-07-10. High severity, CVSS 9.3. EPSS: 21.9% chance of exploitation in the next 30 days. The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Format Runtime 11 and Windows Media Player 11 and 12 allows…
CVE-2010-2745, published 2010-10-13. High severity, CVSS 9.3. EPSS: 23.8% chance of exploitation in the next 30 days. Microsoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action, which allows user-assisted remote attackers to execute arbitrary code via…
CVE-2010-3138, published 2010-08-27. High severity, CVSS 9.3. EPSS: 27.3% chance of exploitation in the next 30 days. Untrusted search path vulnerability in the Indeo Codec in iac25_32.ax in Microsoft Windows XP SP3 allows local users to gain privileges via a Trojan horse iacenc.dll file in the current working…
CVE-2010-0268, published 2010-04-14. High severity, CVSS 9.3. EPSS: 20.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Windows Media Player ActiveX control in Windows Media Player (WMP) 9 on Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows remote attackers to execute arbitrary…
CVE-2010-1042, published 2010-03-23. Medium severity, CVSS 4.3. EPSS: 10.3% chance of exploitation in the next 30 days. Microsoft Windows Media Player 11 does not properly perform colorspace conversion, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code…
CVE-2010-0718, published 2010-02-26. Medium severity, CVSS 4.3. EPSS: 8.8% chance of exploitation in the next 30 days. Buffer overflow in Microsoft Windows Media Player 9 and 11.0.5721.5145 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted .mpg file.
CVE-2009-4309, published 2009-12-13. High severity, CVSS 9.3. EPSS: 24.1% chance of exploitation in the next 30 days. Heap-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via…