Description
Windows Media Player (WMP) 7 and 8, as running on Internet Explorer and possibly other Microsoft products that process HTML, allows remote attackers to bypass zone restrictions and access or execute arbitrary files via an IFRAME tag pointing to an ASF file whose Content-location contains a File:// URL.
References (6)
Core 6
Core References
Mailing List mailing-list
x_refsource_ntbugtraq
http://marc.info/?l=ntbugtraq&m=105906261314411&w=2
Mailing List mailing-list
x_refsource_ntbugtraq
http://marc.info/?l=ntbugtraq&m=105899408520292&w=2
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=105899261818572&w=2
Various Sources x_refsource_misc
http://www.pivx.com/larholm/unpatched/
Various Sources x_refsource_misc
http://www.malware.com/once.again%21.html
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=105906867322856&w=2
Scores
EPSS
0.1298
EPSS Percentile
95.9%
Details
Status
published
Products (2)
microsoft/windows_media_player
7
microsoft/windows_media_player
8
Published
Aug 27, 2003
Tracked Since
Feb 18, 2026