CVE-2012-0003

Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista…

High · published January 10, 2012

Patch now

High probability of exploitation

CVSS calls it high at 8.1. It sits in the 99.4th percentile for exploit probability.

CVSS v3.1
8.1
EPSS
70%
Percentile
99.4
In the wild
Unconfirmed
What it is

Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to execute arbitrary code via a crafted MIDI file, aka "MIDI Remote Code Execution Vulnerability."

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.69647 · 99.4th percentile
Published
2012-01-10T21:00Z
EPSS history
Timeline
  • 10 JAN 21:00Z
    Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista…
    cvelistv5