Vulnerability in Microsoft Windows Media Player

CVE-2000-1112

Microsoft Windows Media Player 7 executes scripts in custom skin (.WMS) files, which could allow remote attackers to gain privileges via a skin that contains a malicious script, aka the ".WMS Script Execution" vulnerability.

EPSS: 0.140 (96.2th percentile) — read the EPSS interpretation.

Affected products

Microsoft Windows_media_player — versions 6.4, 7
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_MS, vendor-advisory)
cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)