Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to execute arbitrary code via a skins file with a URL containing hex-encoded backslash characters (%5C) that causes an executable to be placed in an arbitrary location.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Windows媒体播放器外壳下载代码执行漏洞(MS03-017)
Vulnerability Description
Microsoft Windows Media Player是一款媒体播放器,提供使用"skins"来更改播放器的外观。外壳是由XML文件组织一个和多个文件完成,XML文件告诉Windows媒体播放器怎样使用这些文件显示给用户。 Windows媒体播放器在处理下载外壳文件时存在问题,远程攻击者可以利用这个漏洞利用恶意页面上传任意文件到目标系统中任意位置。 当Internet Explorer遇到MIME类型为"application/x-ms-wmz"的文档时,就会以"/layout"命令行选项启动wmp
CVSS Information
N/A
Vulnerability Type
N/A