CVE-2001-0243: Medium severity Microsoft Windows Media Player vulnerability

Published Jun 27, 2001

Updated

Windows Media Player 7 and earlier stores Internet shortcuts in a user's Temporary Files folder with a fixed filename instead of in the Internet Explorer cache, which causes the HTML in those shortcuts to run in the Local Computer Zone instead of the Internet Zone, which allows remote attackers to read certain files.

Affected Software

2 affected components

Microsoft Windows Media Player=7

Microsoft Windows Media Player=6.4

Event History

Jun 27, 2001

CVE Published

04:00 AM

Sep 18, 2001

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0243?

CVE-2001-0243 is classified as a medium severity vulnerability due to potential remote code execution risks.

How do I fix CVE-2001-0243?

To fix CVE-2001-0243, upgrade to a later version of Windows Media Player that addresses this vulnerability.

What versions of Windows Media Player are affected by CVE-2001-0243?

CVE-2001-0243 affects Windows Media Player versions 6.4 and 7.

What kind of attacks can exploit CVE-2001-0243?

CVE-2001-0243 can be exploited by attackers to execute arbitrary HTML code in the Local Computer Zone.

Is CVE-2001-0243 still a relevant vulnerability?

While CVE-2001-0243 is an older vulnerability, it is still relevant for systems using the affected versions of Windows Media Player.