CVE-2003-0228: microsoft windows_media_player

EPSS trend

Probability

46.31%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 46.31% on 20-09-2026

20-09-202620-10-2026

EPSS score

46.31%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databaseremotewindowsVerified
Microsoft Windows Media Player 7.1 - Skin File Code Execution
Maturity: weaponized

References

8 links

marc.info?l=bugtraq&m=105232913516488&w=2Mailing ListX Refsource BUGTRAQ
www.securityfocus.com/bid/7517VDB EntryX Refsource BIDExploitPatchVendor Advisory
marc.info?l=ntbugtraq&m=105233960728901&w=2Mailing ListX Refsource NTBUGTRAQ
exchange.xforce.ibmcloud.com/vulnerabilities/11953VDB EntryX Refsource XF
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A321VDB EntrySignatureX Refsource OVAL
www.kb.cert.org/vuls/id/384932Third Party AdvisoryX Refsource CERT VNUS Government Resource
marc.info?l=bugtraq&m=105240528419389&w=2Mailing ListX Refsource BUGTRAQ
docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-017Vendor AdvisoryX Refsource MS

Related vulnerabilities

CVE-2003-1107microsoftwindows_media_player5.18%21y ago11-03-2005 05:00The DHTML capability in Microsoft Windows Media Player (WMP) 6.4, 7.0, 7.1, and 9 may run certain URL commands from a security zone that is less trusted than the current zone, which allows attackers to bypass intended access restrictions.CVE-2003-0348microsoftwindows_media_player19.93%23y ago28-06-2003 04:00A certain Microsoft Windows Media Player 9 Series ActiveX control allows remote attackers to view and manipulate the Media Library on the local system via HTML script.CVE-2003-0604microsoftwindows_media_player12.98%23y ago29-07-2003 04:00Windows Media Player (WMP) 7 and 8, as running on Internet Explorer and possibly other Microsoft products that process HTML, allows remote attackers to bypass zone restrictions and access or execute arbitrary files via an IFRAME tag pointing to an ASF file whose Content-location contains a File:// URL.CVE-2013-3127microsoftwindows_media_format_runtime+121.91%13y ago10-07-2013 01:00The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Format Runtime 11 and Windows Media Player 11 and 12 allows remote attackers to execute arbitrary code via a crafted media file, aka "WMV Video Decoder Remote Code Execution Vulnerability."CVE-2015-1728microsoftwindows_media_player17.56%11y ago10-06-2015 01:00Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "Windows Media Player RCE via DataObject Vulnerability."CVE-2007-4288microsoftwindows_media_player14.79%19y ago09-08-2007 21:00Microsoft Windows Media Player 11 (wmplayer.exe) allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted .au file that triggers a divide-by-zero error, as demonstrated by iapetus.au.

All vulnerabilities inwindows_media_player

CVE-2003-0228: microsoft windows_media_player

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References