CVE-2003-0228: High severity Microsoft Windows Media Player vulnerability
Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to execute arbitrary code via a skins file with a URL containing hex-encoded backslash characters (%5C) that causes an executable to be placed in an arbitrary location.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0228?
CVE-2003-0228 has been classified as a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2003-0228?
To mitigate CVE-2003-0228, users should upgrade to a newer version of Windows Media Player that is not affected by this vulnerability.
What systems are affected by CVE-2003-0228?
CVE-2003-0228 affects Microsoft Windows Media Player 7.1 and other versions prior to updates addressing this issue.
What type of attack does CVE-2003-0228 enable?
CVE-2003-0228 allows attackers to execute arbitrary code on a victim's system through a maliciously crafted skins file.
Is there a workaround for CVE-2003-0228?
As a workaround for CVE-2003-0228, users can consider disabling the ability to install skins from untrusted sources until a patch is applied.