Vulnerability in Microsoft Windows_media_player

CVE-2015-1728

Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "Windows Media Player RCE via DataObject Vulnerability."

EPSS: 0.177 (96.8th percentile) — read the EPSS interpretation.

Affected products

Microsoft Windows_media_player — versions 10, 10.00.00.3646, 10.00.00.3990
N/a — versions n/a

Weakness classification (CWE)

CWE-17

References

secure@microsoft.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
secure@microsoft.com (x_refsource_IDEFENSE, VDB Entry, Third Party Advisory, third-party-advisory)
secure@microsoft.com (x_refsource_MS, vendor-advisory)