CVE-2001-0137

Description

Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a skin file named skin.wmz, then referencing that skin in the codebase parameter to an applet tag, aka the Windows Media Player Skins File Download" vulnerability.

Affected products

• microsoft / windows_media_player7 – 7

Exploits & proofs of concept

• exploit-dbMicrosoft Windows Media Player 7.0 - '.wmz' Arbitrary Java Appletby Georgi Guninski

References

• MISChttp://www.securityfocus.com/bid/2203
• MISChttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-010
• MAILING_LISThttp://marc.info/?l=bugtraq&m=97958100816503&w=2
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/5937