CVE-2001-0137

published 2001-03-12

CVE-2001-0137: Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a skin file named…

medium 5.1 CVSS 3.1

AV N AC H Au N C P I P A P

EXPLOIT

Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a skin file named skin.wmz, then referencing that skin in the codebase parameter to an applet tag, aka the Windows Media Player Skins File Download" vulnerability.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
microsoft	windows_media_player	—	—