Unscored severity · published Aug 27, 2003
CVE-2003-0604
Windows Media Player (WMP) 7 and 8, as running on Internet Explorer and possibly other Microsoft products that process HTML, allows remote attackers to bypass zone restrictions…
–
CVSS
13%
EPSS
No
On KEV
Description
Windows Media Player (WMP) 7 and 8, as running on Internet Explorer and possibly other Microsoft products that process HTML, allows remote attackers to bypass zone restrictions and access or execute arbitrary files via an IFRAME tag pointing to an ASF file whose Content-location contains a File:// URL.
Exploitation
Is it being used?
Exploit prediction (EPSS)13.0% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WM
Windows Media Player · Microsoft
7; 8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0604
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0604
marc.info
http://marc.info/?l=bugtraq&m=105899261818572&w=2
marc.info
http://marc.info/?l=bugtraq&m=105906867322856&w=2
marc.info
http://marc.info/?l=ntbugtraq&m=105899408520292&w=2
marc.info
http://marc.info/?l=ntbugtraq&m=105906261314411&w=2
www.malware.com
http://www.malware.com/once.again%21.html
www.pivx.com
http://www.pivx.com/larholm/unpatched/
More from Windows Media Player
7.8
CVE-2002-1844
Microsoft Windows Media Player (WMP) 6.3, when installed on Solaris, installs executables with world-writable permissions, which allows local users to delete or modify the…
2.5
CVE-2017-11768
Windows Media Player in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows…
–
CVE-2015-1728
Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "Windows Media Player RCE via DataObject…
–
CVE-2014-2671
Microsoft Windows Media Player (WMP) 11.0.5721.5230 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a…
–
CVE-2013-3127
The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Format Runtime 11 and Windows Media Player…