CVE-2001-0137: Medium severity Microsoft Windows Media Player vulnerability

Published Mar 12, 2001

Updated

Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a skin file named skin.wmz, then referencing that skin in the codebase parameter to an applet tag, aka the Windows Media Player Skins File Download" vulnerability.

Affected Software

1 affected component

Microsoft Windows Media Player=7

Remediation

Patch Available

http://www.securityfocus.com/bid/2203

Event History

Mar 12, 2001

CVE Published

05:00 AM

May 7, 2001

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0137?

CVE-2001-0137 is considered a critical vulnerability as it allows remote attackers to execute malicious Java applets.

How do I fix CVE-2001-0137?

To fix CVE-2001-0137, update to a patched version of Windows Media Player beyond version 7.

Which versions of Windows Media Player are affected by CVE-2001-0137?

CVE-2001-0137 specifically affects Microsoft Windows Media Player version 7.

What are the potential impacts of CVE-2001-0137?

The impact of CVE-2001-0137 includes unauthorized execution of code, potentially leading to system compromise.

Can CVE-2001-0137 be exploited through the internet?

Yes, CVE-2001-0137 can be exploited remotely via the internet on vulnerable Internet Explorer clients.