CVE-2003-0228

published 2003-05-27

CVE-2003-0228: Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to execute arbitrary…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

EXPLOIT

Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to execute arbitrary code via a skins file with a URL containing hex-encoded backslash characters (%5C) that causes an executable to be placed in an arbitrary location.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
microsoft	windows_media_player	—	—