Login Request a demo
Unscored severity · published Sep 26, 2007
CVE-2007-5095
Microsoft Windows Media Player (WMP) 9 on Windows XP SP2 invokes Internet Explorer to render HTML documents contained inside some media files, regardless of what default web…
–
CVSS
15.2%
EPSS
No
On KEV
Description
Microsoft Windows Media Player (WMP) 9 on Windows XP SP2 invokes Internet Explorer to render HTML documents contained inside some media files, regardless of what default web browser is configured, which might allow remote attackers to exploit vulnerabilities in software that the user does not expect to run, as demonstrated by the HTMLView parameter in an .asx file.
Exploitation
Is it being used?
Exploit prediction (EPSS)15.2% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WM
Windows Media Player · Microsoft
9 · source: NVD
Affected product
WM
Windows Media Player
Microsoft
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5095
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5095
osvdb.org
http://osvdb.org/41093
www.gnucitizen.org
http://www.gnucitizen.org/blog/backdooring-windows-media-files
www.securityfocus.com
http://www.securityfocus.com/archive/1/479825/100/100/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/479854/100/100/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/479855/100/100/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/479856/100/100/threaded
More from Windows Media Player
7.8
CVE-2002-1844
Microsoft Windows Media Player (WMP) 6.3, when installed on Solaris, installs executables with world-writable permissions, which allows local users to delete or modify the…
2.5
CVE-2017-11768
Windows Media Player in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows…
–
CVE-2015-1728
Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "Windows Media Player RCE via DataObject…
–
CVE-2014-2671
Microsoft Windows Media Player (WMP) 11.0.5721.5230 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a…
–
CVE-2013-3127
The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Format Runtime 11 and Windows Media Player…