CVE-2007-3037

Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafted header…

published August 14, 2007

CVSS
—
EPSS
22%
Percentile
97.6
In the wild
Unconfirmed
What it is

Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafted header information that causes a size mismatch between compressed and decompressed data and triggers a heap-based buffer overflow, aka "Windows Media Player Code Execution Vulnerability Parsing Skins."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.21825 · 97.6th percentile
Published
2007-08-14T21:00Z
EPSS history
Timeline
  • 14 AUG 21:00Z
    Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafted header…
    cvelistv5