CVE-2015-1728

Published: Jun 10, 2015Modified: May 6, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "Windows Media Player RCE via DataObject Vulnerability."

Affected (10)

Products: Microsoft: Windows Media Player

Microsoft

1 product

Windows Media Player

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows Media Player	Version 10.00.00.3646
Microsoft Windows Media Player	Version 10.00.00.3990
Microsoft Windows Media Player	Version 10.00.00.4019
Microsoft Windows Media Player	Version 10.00.00.4036
Microsoft Windows Media Player	Version 10
Microsoft Windows Media Player	Version 11.0.5721.5145
Microsoft Windows Media Player	Version 11.0.5721.5230
Microsoft Windows Media Player	Version 11.0.6000.6324
Microsoft Windows Media Player	Version 11
Microsoft Windows Media Player	Version 12