CVE-2003-0604

Published: Aug 27, 2003Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Windows Media Player (WMP) 7 and 8, as running on Internet Explorer and possibly other Microsoft products that process HTML, allows remote attackers to bypass zone restrictions and access or execute arbitrary files via an IFRAME tag pointing to an ASF file whose Content-location contains a File:// URL.

Affected (2)

Products: Microsoft: Windows Media Player

1 product

Windows Media Player

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows Media Player	Version 7
Microsoft Windows Media Player	Version 8

References (12)

http://marc.info/?l=bugtraq&m=105899261818572&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=105906867322856&w=2

Source: cve@mitre.org

http://marc.info/?l=ntbugtraq&m=105899408520292&w=2

Source: cve@mitre.org

http://marc.info/?l=ntbugtraq&m=105906261314411&w=2

Source: cve@mitre.org

http://www.malware.com/once.again%21.html

Source: cve@mitre.org

http://www.pivx.com/larholm/unpatched/

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=105899261818572&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=105906867322856&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=ntbugtraq&m=105899408520292&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=ntbugtraq&m=105906261314411&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.malware.com/once.again%21.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.pivx.com/larholm/unpatched/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.