CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2001-0541
https://notcve.org/view.php?id=CVE-2001-0541
Buffer overflow in Microsoft Windows Media Player 7.1 and earlier allows remote attackers to execute arbitrary commands via a malformed Windows Media Station (.NSC) file. Desbordamiento de buffer en el Reproductor de Medios de Windows 7.1 y anteriores que permite a atacantes remotos ejecutar comandos arbitrarios mediante un fichero malformado de Windows Media Station (.nsc) • http://www.securityfocus.com/archive/1/187001 http://www.securityfocus.com/bid/3105 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-042 https://exchange.xforce.ibmcloud.com/vulnerabilities/6907 •
CVSS: 5.0EPSS: 2%CPEs: 2EXPL: 0CVE-2001-0243
https://notcve.org/view.php?id=CVE-2001-0243
Windows Media Player 7 and earlier stores Internet shortcuts in a user's Temporary Files folder with a fixed filename instead of in the Internet Explorer cache, which causes the HTML in those shortcuts to run in the Local Computer Zone instead of the Internet Zone, which allows remote attackers to read certain files. • http://www.securityfocus.com/bid/2765 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-029 https://exchange.xforce.ibmcloud.com/vulnerabilities/6584 •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 1CVE-2001-0242
https://notcve.org/view.php?id=CVE-2001-0242
Buffer overflows in Microsoft Windows Media Player 7 and earlier allow remote attackers to execute arbitrary commands via (1) a long version tag in an .ASX file, or (2) a long banner tag, a variant of the ".ASX Buffer Overrun" vulnerability as discussed in MS:MS00-090. • http://www.kb.cert.org/vuls/id/187528 http://www.securityfocus.com/archive/1/181419 http://www.securityfocus.com/archive/1/183906 http://www.securityfocus.com/bid/2677 http://www.securityfocus.com/bid/2686 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-029 https://exchange.xforce.ibmcloud.com/vulnerabilities/5574 •
CVSS: 7.5EPSS: 3%CPEs: 1EXPL: 2CVE-2001-0148 – Microsoft Windows Media Player 7.0 - JavaScript URL
https://notcve.org/view.php?id=CVE-2001-0148
The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via javascript URLs, a variant of the "Frame Domain Verification" vulnerability. • https://www.exploit-db.com/exploits/20528 http://archives.neohapsis.com/archives/bugtraq/2001-01/0000.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015 https://exchange.xforce.ibmcloud.com/vulnerabilities/6227 •
CVSS: 5.1EPSS: 3%CPEs: 1EXPL: 2CVE-2001-0137 – Microsoft Windows Media Player 7.0 - '.wmz' Arbitrary Java Applet
https://notcve.org/view.php?id=CVE-2001-0137
Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a skin file named skin.wmz, then referencing that skin in the codebase parameter to an applet tag, aka the Windows Media Player Skins File Download" vulnerability. • https://www.exploit-db.com/exploits/20553 http://marc.info/?l=bugtraq&m=97958100816503&w=2 http://www.securityfocus.com/bid/2203 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-010 https://exchange.xforce.ibmcloud.com/vulnerabilities/5937 •