This CPE summary could be partial or incomplete. Please contact us for a detailed listing.

Summary

Detail
Vendor Microsoft First view 2003-07-24
Product Windows Media Player Last view 2010-10-13
Version 9 Type Application
Update *  
Edition *  
Language *  
Sofware Edition *  
Target Software *  
Target Hardware *  
Other *  
 
CPE Product cpe:2.3:a:microsoft:windows_media_player

Activity : Overall

Related : CVE

  Date Alert Description
9.3 2010-10-13 CVE-2010-2745

Microsoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action, which allows user-assisted remote attackers to execute arbitrary code via crafted media content referenced in an HTML document, aka "Windows Media Player Memory Corruption Vulnerability."

9.3 2010-04-14 CVE-2010-0268

Unspecified vulnerability in the Windows Media Player ActiveX control in Windows Media Player (WMP) 9 on Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows remote attackers to execute arbitrary code via crafted media content, aka "Media Player Remote Code Execution Vulnerability."

4.3 2010-02-26 CVE-2010-0718

Buffer overflow in Microsoft Windows Media Player 9 and 11.0.5721.5145 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted .mpg file.

9.3 2009-10-14 CVE-2009-2525

Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly initialize unspecified functions within compressed audio files, which allows remote attackers to execute arbitrary code via (1) a crafted media file or (2) crafted streaming content, aka "Windows Media Runtime Heap Corruption Vulnerability."

9.3 2009-10-14 CVE-2009-0555

Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly process Advanced Systems Format (ASF) files, which allows remote attackers to execute arbitrary code via a crafted audio file that uses the Windows Media Speech codec, aka "Windows Media Runtime Voice Sample Rate Vulnerability."

4.3 2008-12-29 CVE-2008-5745

Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, including 11.0.5721.5260, allows remote attackers to cause a denial of service (application crash) via a crafted (1) WAV, (2) SND, or (3) MID file. NOTE: this has been incorrectly reported as a code-execution vulnerability. NOTE: it is not clear whether this issue is related to CVE-2008-4927.

4.3 2008-11-04 CVE-2008-4927

Microsoft Windows Media Player (WMP) 9.0 through 11 allows user-assisted attackers to cause a denial of service (application crash) via a malformed (1) MIDI or (2) DAT file, related to "MThd Header Parsing." NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

7.5 2007-09-26 CVE-2007-5095

Microsoft Windows Media Player (WMP) 9 on Windows XP SP2 invokes Internet Explorer to render HTML documents contained inside some media files, regardless of what default web browser is configured, which might allow remote attackers to exploit vulnerabilities in software that the user does not expect to run, as demonstrated by the HTMLView parameter in an .asx file.

4 2007-08-14 CVE-2007-3037

Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafted header information that causes a size mismatch between compressed and decompressed data and triggers a heap-based buffer overflow, aka "Windows Media Player Code Execution Vulnerability Parsing Skins."

7.6 2007-08-14 CVE-2007-3035

Unspecified vulnerability in Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafted header information that is not properly handled during decompression, aka "Windows Media Player Code Execution Vulnerability Decompressing Skins."

9.3 2006-06-13 CVE-2006-0025

Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to execute arbitrary code via a PNG image with a large chunk size.

9.3 2006-02-14 CVE-2006-0006

Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Windows 2000 SP4 and XP SP1, and Media Player 10 on XP SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted bitmap (.BMP) file that specifies a size of 0 but contains additional data.

5 2005-10-12 CVE-2005-2128

QUARTZ.DLL in Microsoft Windows Media Player 9 allows remote attackers to write a null byte to arbitrary memory via an AVI file with a crafted strn element with a modified length value.

7.5 2005-05-14 CVE-2005-1574

Windows Media Player 9 and 10, in certain cases, allows content protected by Windows Media Digital Rights Management (WMDRM) to redirect the user to a web site to obtain a license, even when the "Acquire licenses automatically for protected content" setting is not enabled.

5 2004-12-18 CVE-2004-1325

The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote attackers to determine the existence of files on the local system.

2.6 2004-12-18 CVE-2004-1324

The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer.

10 2004-11-23 CVE-2004-0597

Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or the (2) png_handle_sBIT or (3) png_handle_hIST functions do not perform sufficient bounds checking.

7.5 2004-02-08 CVE-2004-1244

Windows Media Player 9 allows remote attackers to execute arbitrary code via a PNG file containing large (1) width or (2) height values, aka the "PNG Processing Vulnerability."

5.1 2003-12-31 CVE-2003-1107

The DHTML capability in Microsoft Windows Media Player (WMP) 6.4, 7.0, 7.1, and 9 may run certain URL commands from a security zone that is less trusted than the current zone, which allows attackers to bypass intended access restrictions.

6.4 2003-07-24 CVE-2003-0348

A certain Microsoft Windows Media Player 9 Series ActiveX control allows remote attackers to view and manipulate the Media Library on the local system via HTML script.

CWE : Common Weakness Enumeration

%idName
36% (4) CWE-119 Failure to Constrain Operations within the Bounds of a Memory Buffer
36% (4) CWE-94 Failure to Control Generation of Code ('Code Injection')
18% (2) CWE-20 Improper Input Validation
9% (1) CWE-189 Numeric Errors

SAINT Exploits

Description Link
Windows Media Player PNG buffer overflow More info here

Open Source Vulnerability Database (OSVDB)

id Description
68557 Microsoft Windows Media Player Reload Operation Object Deallocation Memory Co...
63765 Microsoft Windows Media Player ActiveX fourCC Compression Code Codec Retrieva...
62652 Microsoft Windows Media Player Crafted MPG File Handling Overflow DoS
58845 Microsoft Windows Media Runtime Compressed Audio File Handling Heap Corruptio...
58844 Microsoft Windows Media Player ASF Runtime Voice Sample Rate Handling Arbitra...
51133 Microsoft Windows Media Player Multiple File Handling Remote Overflow
50252 Microsoft Windows Media Player Crafted DAT File MThd Header Handling DoS
50251 Microsoft Windows Media Player Crafted MIDI File MThd Header Handling DoS
41093 Microsoft Windows Media Player (WMP) MSIE Static Invocation HTML Rendering We...
36386 Microsoft Windows Media Player Skin File Handling Crafted Header Arbitrary Co...
36385 Microsoft Windows Media Player Skin File Handling Overflow
26430 Microsoft Windows Media Player PNG Processing Overflow
23131 Microsoft Windows Media Player Bitmap File Processing Overflow
18822 Microsoft DirectX DirectShow QUARTZ.DLL AVI Processing Overflow
16494 Microsoft Windows Media Player WMDRM License Acquisition Page Redirection
13597 Microsoft Windows Media Player PNG File Overflow
12511 Microsoft Windows Media Player ActiveX Control setItemInfo() / getItemInfo() ...
12510 Microsoft Windows Media Player ActiveX Control getItemInfoByAtom() Function F...
10997 Microsoft Windows Media Player ActiveX Control Unauthorized Media Library Man...
8326 libpng png_handle_tRNS Remote Overflow
8312 libpng png_handle_sBIT() Local Overflow
2262 Microsoft Windows Media Player DHTML Local Zone Access

OpenVAS Exploits

id Description
2011-01-14 Name : Vulnerabilities in Windows Media Player Could Allow Remote Code Execution (93...
File : nvt/gb_ms07-047.nasl
2010-10-13 Name : Microsoft Windows Media Player Remote Code Execution Vulnerability (2378111))
File : nvt/secpod_ms10-082.nasl
2010-04-14 Name : Microsoft Windows Media Player Could Allow Remote Code Execution (979402)
File : nvt/secpod_ms10-027.nasl
2010-03-02 Name : Microsoft Windows Media Player '.mpg' Buffer Overflow Vulnerability
File : nvt/gb_ms_windows_media_player_bof_vuln.nasl
2009-10-14 Name : Vulnerabilities in Windows Media Runtime Could Allow Remote Code Execution (9...
File : nvt/secpod_ms09-051.nasl
2009-01-06 Name : Integer Overflow vulnerability in Microsoft Windows Media Player
File : nvt/gb_ms_win_media_player_int_overflow_vuln.nasl
2008-11-11 Name : Microsoft Windows Media Player 'MIDI' or 'DAT' File DoS Vulnerability
File : nvt/secpod_ms_win_media_player_dos_vuln_900172.nasl
2008-09-24 Name : Gentoo Security Advisory GLSA 200408-03 (libpng)
File : nvt/glsa_200408_03.nasl
2008-09-24 Name : Gentoo Security Advisory GLSA 200408-22 (mozilla)
File : nvt/glsa_200408_22.nasl
2008-09-04 Name : FreeBSD Ports: ImageMagick, ImageMagick-nox11
File : nvt/freebsd_ImageMagick3.nasl
2008-09-04 Name : FreeBSD Ports: png
File : nvt/freebsd_png.nasl
2008-01-17 Name : Debian Security Advisory DSA 536-1 (libpng)
File : nvt/deb_536_1.nasl
0000-00-00 Name : Slackware Advisory SSA:2004-222-01 libpng
File : nvt/esoft_slk_ssa_2004_222_01.nasl
0000-00-00 Name : Slackware Advisory SSA:2004-223-01 Mozilla
File : nvt/esoft_slk_ssa_2004_223_01.nasl
0000-00-00 Name : Slackware Advisory SSA:2004-223-02 imagemagick
File : nvt/esoft_slk_ssa_2004_223_02.nasl

Information Assurance Vulnerability Management (IAVM)

id Description
2010-A-0140 Microsoft Windows Media Player Remote Code Execution Vulnerability
Severity: Category II - VMSKEY: V0025516
2010-A-0052 Microsoft Windows Media Player Remote Code Execution Vulnerability
Severity: Category II - VMSKEY: V0024002
2009-A-0091 Multiple Vulnerabilities in Microsoft Windows Media Runtime
Severity: Category II - VMSKEY: V0021744

Snort® IPS/IDS

This CPE have more than 25 Relations. If you want to see a complete summary for this CPE, please contact us.
Date Description
2014-01-10 Microsoft Windows Media Player Malformed PNG detected zTXt overflow attempt
RuleID : 6701 - Type : FILE-IMAGE - Revision : 19
2014-01-10 Microsoft Multiple Products malformed PNG detected tEXt overflow attempt
RuleID : 6700 - Type : FILE-IMAGE - Revision : 20
2014-01-10 Microsoft Windows Media Player Malformed PNG detected iTXt overflow attempt
RuleID : 6699 - Type : FILE-IMAGE - Revision : 19
2014-01-10 Microsoft Windows Media Player Malformed PNG detected tIME overflow attempt
RuleID : 6698 - Type : FILE-IMAGE - Revision : 19
2014-01-10 Microsoft Windows Media Player Malformed PNG detected sPLT overflow attempt
RuleID : 6697 - Type : FILE-IMAGE - Revision : 19
2014-01-10 Microsoft Windows Media Player Malformed PNG detected pHYs overflow attempt
RuleID : 6696 - Type : FILE-IMAGE - Revision : 19
2014-01-10 Microsoft Windows Media Player Malformed PNG detected tRNS overflow attempt
RuleID : 6695 - Type : FILE-IMAGE - Revision : 24
2014-01-10 Microsoft Windows Media Player Malformed PNG detected hIST overflow attempt
RuleID : 6694 - Type : FILE-IMAGE - Revision : 19
2014-01-10 Microsoft Windows Media Player Malformed PNG detected bKGD overflow attempt
RuleID : 6693 - Type : FILE-IMAGE - Revision : 19
2014-01-10 Microsoft Windows Media Player Malformed PNG detected sRGB overflow attempt
RuleID : 6692 - Type : FILE-IMAGE - Revision : 24
2014-01-10 Microsoft Windows Media Player Malformed PNG detected sBIT overflow attempt
RuleID : 6691 - Type : FILE-IMAGE - Revision : 19
2014-01-10 Microsoft Windows Media Player Malformed PNG detected iCCP overflow attempt
RuleID : 6690 - Type : FILE-IMAGE - Revision : 19
2014-01-10 Microsoft Windows Media Player Malformed PNG detected cHRM overflow attempt
RuleID : 6689 - Type : FILE-IMAGE - Revision : 23
2014-01-10 Microsoft Windows Media Player invalid data offset bitmap heap overflow attempt
RuleID : 5712 - Type : FILE-IMAGE - Revision : 17
2014-01-10 Microsoft Windows Media Player zero length bitmap heap overflow attempt
RuleID : 5711 - Type : FILE-IMAGE - Revision : 13
2020-09-19 Microsoft Windows Media Player Firefox plugin memory corruption attempt
RuleID : 54833 - Type : FILE-MULTIMEDIA - Revision : 1
2014-01-10 Microsoft Windows Media Player 7+ ActiveX object access
RuleID : 4156 - Type : BROWSER-PLUGINS - Revision : 14
2016-11-08 Microsoft Windows Media Runtime malformed ASF codec memory corruption attempt
RuleID : 40354 - Type : OS-WINDOWS - Revision : 2
2016-04-09 Microsoft Windows Media Player ActiveX unknown compression algorithm use afte...
RuleID : 38144 - Type : BROWSER-PLUGINS - Revision : 1
2016-04-09 Microsoft Windows Media Player ActiveX unknown compression algorithm use afte...
RuleID : 38143 - Type : BROWSER-PLUGINS - Revision : 1
2016-04-09 Microsoft Windows Media Player ActiveX unknown compression algorithm use afte...
RuleID : 38142 - Type : BROWSER-PLUGINS - Revision : 1
2016-04-09 Microsoft Windows Media Player ActiveX unknown compression algorithm use afte...
RuleID : 38141 - Type : BROWSER-PLUGINS - Revision : 1
2014-12-23 Microsoft and libpng multiple products PNG large image width overflow attempt
RuleID : 32889-community - Type : FILE-IMAGE - Revision : 2
2015-01-23 Microsoft and libpng multiple products PNG large image width overflow attempt
RuleID : 32889 - Type : FILE-IMAGE - Revision : 2
2014-01-10 Microsoft PNG large colour depth download attempt
RuleID : 3134-community - Type : FILE-IMAGE - Revision : 14

Nessus® Vulnerability Scanner

This CPE have more than 25 Relations. If you want to see a complete summary for this CPE, please contact us.
id Description
2010-10-13 Name: The remote Windows host has a media player that is affected by a code executi...
File: smb_nt_ms10-082.nasl - Type: ACT_GATHER_INFO
2010-04-13 Name: The remote Windows host has an ActiveX control that is affected by a code exe...
File: smb_nt_ms10-027.nasl - Type: ACT_GATHER_INFO
2009-10-13 Name: Arbitrary code can be executed on the remote host through opening a Windows M...
File: smb_nt_ms09-051.nasl - Type: ACT_GATHER_INFO
2009-04-23 Name: The remote FreeBSD host is missing one or more security-related updates.
File: freebsd_pkg_f9e3e60be65011d89b0a000347a4fa7d.nasl - Type: ACT_GATHER_INFO
2007-08-14 Name: Arbitrary code can be executed on the remote host through Windows Media Player.
File: smb_nt_ms07-047.nasl - Type: ACT_GATHER_INFO
2007-02-18 Name: The remote Mandrake Linux host is missing one or more security updates.
File: mandrake_MDKSA-2006-213.nasl - Type: ACT_GATHER_INFO
2007-02-18 Name: The remote Mandrake Linux host is missing a security update.
File: mandrake_MDKSA-2006-212.nasl - Type: ACT_GATHER_INFO
2006-06-13 Name: Arbitrary code can be executed on the remote host through the Media Player.
File: smb_nt_ms06-024.nasl - Type: ACT_GATHER_INFO
2006-02-14 Name: Arbitrary code can be executed on the remote host through the Media Player.
File: smb_nt_ms06-005.nasl - Type: ACT_GATHER_INFO
2005-10-11 Name: A vulnerability in DirectShow could allow remote code execution.
File: smb_nt_ms05-050.nasl - Type: ACT_GATHER_INFO
2005-07-13 Name: The remote Slackware host is missing a security update.
File: Slackware_SSA_2004-223-01.nasl - Type: ACT_GATHER_INFO
2005-07-13 Name: The remote Slackware host is missing a security update.
File: Slackware_SSA_2004-223-02.nasl - Type: ACT_GATHER_INFO
2005-07-13 Name: The remote Slackware host is missing a security update.
File: Slackware_SSA_2004-222-01.nasl - Type: ACT_GATHER_INFO
2005-02-08 Name: Arbitrary code can be executed on the remote host through the Media Player.
File: smb_nt_ms05-009.nasl - Type: ACT_GATHER_INFO
2004-09-29 Name: The remote Debian host is missing a security-related update.
File: debian_DSA-536.nasl - Type: ACT_GATHER_INFO
2004-08-30 Name: The remote Gentoo host is missing one or more security-related patches.
File: gentoo_GLSA-200408-22.nasl - Type: ACT_GATHER_INFO
2004-08-30 Name: The remote Gentoo host is missing one or more security-related patches.
File: gentoo_GLSA-200408-03.nasl - Type: ACT_GATHER_INFO
2004-08-22 Name: The remote Mandrake Linux host is missing one or more security updates.
File: mandrake_MDKSA-2004-082.nasl - Type: ACT_GATHER_INFO
2004-08-22 Name: The remote Mandrake Linux host is missing one or more security updates.
File: mandrake_MDKSA-2004-079.nasl - Type: ACT_GATHER_INFO
2004-08-10 Name: The remote host is missing a Mac OS X update that fixes a security issue.
File: macosx_SecUpd20040809.nasl - Type: ACT_GATHER_INFO
2004-08-05 Name: The remote Red Hat host is missing one or more security updates.
File: redhat-RHSA-2004-421.nasl - Type: ACT_GATHER_INFO
2004-08-05 Name: The remote Red Hat host is missing one or more security updates.
File: redhat-RHSA-2004-402.nasl - Type: ACT_GATHER_INFO
2004-08-05 Name: The remote Fedora Core host is missing a security update.
File: fedora_2004-239.nasl - Type: ACT_GATHER_INFO
2004-08-05 Name: The remote Fedora Core host is missing a security update.
File: fedora_2004-238.nasl - Type: ACT_GATHER_INFO
2004-08-05 Name: The remote Fedora Core host is missing a security update.
File: fedora_2004-237.nasl - Type: ACT_GATHER_INFO