CVE-2005-2128: microsoft windows_media_player

EPSS trend

Probability

40.49%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 40.49% on 20-09-2026

20-09-202620-10-2026

EPSS score

40.49%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

15 links

secunia.com/advisories/17160Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1267VDB EntrySignatureX Refsource OVAL
www.eeye.com/html/research/advisories/AD20051011a.htmlThird Party AdvisoryX Refsource EEYE
support.avaya.com/elmodocs2/security/ASA-2005-214.pdfX Refsource CONFIRM
www.kb.cert.org/vuls/id/995220Third Party AdvisoryX Refsource CERT VNUS Government Resource
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1149VDB EntrySignatureX Refsource OVAL
www.osvdb.org/18822VDB EntryX Refsource OSVDB
docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-050Vendor AdvisoryX Refsource MS
secunia.com/advisories/17172Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/17509Third Party AdvisoryX Refsource SECUNIA

Show all 15 references

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1434VDB EntrySignatureX Refsource OVAL
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1424VDB EntrySignatureX Refsource OVAL
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1231VDB EntrySignatureX Refsource OVAL
www.us-cert.gov/cas/techalerts/TA05-284A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
www.securityfocus.com/bid/15063VDB EntryX Refsource BID

Related vulnerabilities

CVE-2003-1107microsoftwindows_media_player5.18%21y ago11-03-2005 05:00The DHTML capability in Microsoft Windows Media Player (WMP) 6.4, 7.0, 7.1, and 9 may run certain URL commands from a security zone that is less trusted than the current zone, which allows attackers to bypass intended access restrictions.CVE-2003-0228microsoftwindows_media_player46.31%23y ago08-05-2003 04:00Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to execute arbitrary code via a skins file with a URL containing hex-encoded backslash characters (%5C) that causes an executable to be placed in an arbitrary location.CVE-2003-0348microsoftwindows_media_player19.93%23y ago28-06-2003 04:00A certain Microsoft Windows Media Player 9 Series ActiveX control allows remote attackers to view and manipulate the Media Library on the local system via HTML script.CVE-2003-0604microsoftwindows_media_player12.98%23y ago29-07-2003 04:00Windows Media Player (WMP) 7 and 8, as running on Internet Explorer and possibly other Microsoft products that process HTML, allows remote attackers to bypass zone restrictions and access or execute arbitrary files via an IFRAME tag pointing to an ASF file whose Content-location contains a File:// URL.CVE-2013-3127microsoftwindows_media_format_runtime+121.91%13y ago10-07-2013 01:00The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Format Runtime 11 and Windows Media Player 11 and 12 allows remote attackers to execute arbitrary code via a crafted media file, aka "WMV Video Decoder Remote Code Execution Vulnerability."CVE-2015-1728microsoftwindows_media_player17.56%11y ago10-06-2015 01:00Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "Windows Media Player RCE via DataObject Vulnerability."

All vulnerabilities inwindows_media_player

CVE-2005-2128: microsoft windows_media_player

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References