CVE-2001-0148

Description

The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via javascript URLs, a variant of the "Frame Domain Verification" vulnerability.

Affected products

• microsoft / windows_media_player7 – 7

Exploits & proofs of concept

• exploit-dbMicrosoft Windows Media Player 7.0 - JavaScript URLby Georgi Guninski

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/6227
• MISChttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015
• MISChttp://archives.neohapsis.com/archives/bugtraq/2001-01/0000.html