Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2003-0228

Quick assessment

Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Microsoft Windows Media Player是一款媒体播放器，提供使用"skins"来更改播放器的外观。外壳是由XML文件组织一个和多个文件完成，XML文件告诉Windows媒体播放器怎样使用这些文件显示给用户。 Windows媒体播放器在处理下载外壳文件时存在问题，远程攻击者可以利用这个漏洞利用恶意页面上传任意文件到目标系统中任意位置。 当Internet Explorer遇到MIME类型为"application/x-ms-wmz"的文档时，就会以"/layout"命令行选项启动wmp

AI Predicted 9.8 Difficulty: Easy EPSS 46.31% · P99

Public Exploits 1

ExploitDB · 1 EDB-22570 [remote]
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2003-0228

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to execute arbitrary code via a skins file with a URL containing hex-encoded backslash characters (%5C) that causes an executable to be placed in an arbitrary location.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Windows媒体播放器外壳下载代码执行漏洞(MS03-017)
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Windows Media Player是一款媒体播放器，提供使用"skins"来更改播放器的外观。外壳是由XML文件组织一个和多个文件完成，XML文件告诉Windows媒体播放器怎样使用这些文件显示给用户。 Windows媒体播放器在处理下载外壳文件时存在问题，远程攻击者可以利用这个漏洞利用恶意页面上传任意文件到目标系统中任意位置。 当Internet Explorer遇到MIME类型为"application/x-ms-wmz"的文档时，就会以"/layout"命令行选项启动wmp
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2003-0228

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2003-0228

请登录查看更多情报信息。

Vendor Advisories for CVE-2003-0228 (4)

Mailing List Discussions for CVE-2003-0228 (3)

Same Patch Batch · n/a · 2003-05-08 · 14 CVEs total

CVE-2003-0244 Linux内核路由缓冲条目远程拒绝服务攻击漏洞
CVE-2003-0258 Cisco VPN 3000系列集中器和Cisco VPN 3002硬件客户端网络威胁
CVE-2003-0259 Cisco VPN 3000系列畸形SSH初始化包拒绝服务攻击漏洞
CVE-2003-0260 Cisco VPN 3000系列集中器和Cisco VPN 3002硬件客户端服务拒绝漏洞
CVE-2003-0261 fuzz根权限威胁
CVE-2003-0262 Leksbot多个未明漏洞
CVE-2003-0263 Floosietek FTGate PRO SMTP MAIL FROM远程缓冲区溢出漏洞
CVE-2003-0264 SLMail安全漏洞
CVE-2003-0265 SAP数据库SDBINST竞争条件漏洞
CVE-2003-0266 Windows SLWebMail 缓冲区溢出漏洞
CVE-2003-0267 Windows SLWebMail 3 ShowGodLog.dll文件溢出漏洞
CVE-2003-0268 Windows SLWebMail漏洞
CVE-2003-0269 Youbin HOME缓冲区溢出漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2003-0228

No comments yet

Leave a comment