CVE-2001-0148: High severity Microsoft Windows Media Player vulnerability

Published May 7, 2001

Updated

The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via javascript URLs, a variant of the "Frame Domain Verification" vulnerability.

Affected Software

1 affected component

Microsoft Windows Media Player=7

Remediation

Patch Available

http://archives.neohapsis.com/archives/bugtraq/2001-01/0000.html

Event History

May 7, 2001

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0148?

CVE-2001-0148 is considered a high severity vulnerability due to the potential for remote code execution.

How do I fix CVE-2001-0148?

To address CVE-2001-0148, users should upgrade to a patched version of Windows Media Player, specifically versions released after the vulnerability was disclosed.

What systems are affected by CVE-2001-0148?

CVE-2001-0148 affects Windows Media Player 7 on Microsoft Windows operating systems.

What type of attack does CVE-2001-0148 allow?

CVE-2001-0148 allows remote attackers to execute arbitrary commands in Internet Explorer through the exploitation of javascript URLs.

Is CVE-2001-0148 still a risk for current systems?

CVE-2001-0148 is primarily a risk for legacy systems still using Windows Media Player 7, as newer software versions have mitigated this vulnerability.