cbcvebase.
CVE-2007-3037
published 2007-08-14

CVE-2007-3037: Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafted header…

PriorityP333medium4CVSS 2.0
AVNACHAuNCPIPAN
EPSS
21.82%
97.4th percentile
Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafted header information that causes a size mismatch between compressed and decompressed data and triggers a heap-based buffer overflow, aka "Windows Media Player Code Execution Vulnerability Parsing Skins."

Affected

4 ranges
VendorProductVersion rangeFixed in
microsoftwindows_media_player——
microsoftwindows_media_player——
microsoftwindows_media_player——
microsoftwindows_media_player——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.