CVE-2007-3035: microsoft windows_media_player

EPSS trend

Probability

25.00%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 25.00% on 20-09-2026

20-09-202620-10-2026

EPSS score

25.00%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

10 links

www.securityfocus.com/bid/25305VDB EntryX Refsource BID
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1352VDB EntrySignatureX Refsource OVAL
www.us-cert.gov/cas/techalerts/TA07-226A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
secunia.com/advisories/26433Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.zerodayinitiative.com/advisories/ZDI-07-047.htmlX Refsource MISC
securitytracker.com/id?1018565VDB EntryX Refsource SECTRACK
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-047Vendor AdvisoryX Refsource MS
www.securityfocus.com/archive/1/476548/100/0/threadedMailing ListX Refsource BUGTRAQ
exchange.xforce.ibmcloud.com/vulnerabilities/35895VDB EntryX Refsource XF
www.vupen.com/english/advisories/2007/2871VDB EntryX Refsource VUPENVendor Advisory

Related vulnerabilities

CVE-2003-1107microsoftwindows_media_player5.18%21y ago11-03-2005 05:00The DHTML capability in Microsoft Windows Media Player (WMP) 6.4, 7.0, 7.1, and 9 may run certain URL commands from a security zone that is less trusted than the current zone, which allows attackers to bypass intended access restrictions.CVE-2003-0228microsoftwindows_media_player46.31%23y ago08-05-2003 04:00Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to execute arbitrary code via a skins file with a URL containing hex-encoded backslash characters (%5C) that causes an executable to be placed in an arbitrary location.CVE-2003-0348microsoftwindows_media_player19.93%23y ago28-06-2003 04:00A certain Microsoft Windows Media Player 9 Series ActiveX control allows remote attackers to view and manipulate the Media Library on the local system via HTML script.CVE-2003-0604microsoftwindows_media_player12.98%23y ago29-07-2003 04:00Windows Media Player (WMP) 7 and 8, as running on Internet Explorer and possibly other Microsoft products that process HTML, allows remote attackers to bypass zone restrictions and access or execute arbitrary files via an IFRAME tag pointing to an ASF file whose Content-location contains a File:// URL.CVE-2013-3127microsoftwindows_media_format_runtime+121.91%13y ago10-07-2013 01:00The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Format Runtime 11 and Windows Media Player 11 and 12 allows remote attackers to execute arbitrary code via a crafted media file, aka "WMV Video Decoder Remote Code Execution Vulnerability."CVE-2015-1728microsoftwindows_media_player17.56%11y ago10-06-2015 01:00Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "Windows Media Player RCE via DataObject Vulnerability."

All vulnerabilities inwindows_media_player

CVE-2007-3035: microsoft windows_media_player

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References