high7.5Public exploit code
CVE-2001-0148
The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via javascript URLs, a variant of the "Frame…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows Media Player 7.0 - JavaScript URL2001-01-01 · remote · windows · Verified
Impact
The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via javascript URLs, a variant of the "Frame Domain Verification" vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows Media Player | Version 7 |