CVE-2003-0604: High severity Microsoft Windows Media Player vulnerability
Windows Media Player (WMP) 7 and 8, as running on Internet Explorer and possibly other Microsoft products that process HTML, allows remote attackers to bypass zone restrictions and access or execute arbitrary files via an IFRAME tag pointing to an ASF file whose Content-location contains a File:// URL.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0604?
CVE-2003-0604 is considered a high severity vulnerability due to its ability to bypass zone restrictions and execute arbitrary files.
How do I fix CVE-2003-0604?
To fix CVE-2003-0604, users should update to a patched version of Windows Media Player or apply any security updates provided by Microsoft.
Which versions of Windows Media Player are affected by CVE-2003-0604?
CVE-2003-0604 affects Microsoft Windows Media Player versions 7 and 8.
What type of attack does CVE-2003-0604 allow?
CVE-2003-0604 allows remote attackers to access or execute arbitrary files on the victim's system through an IFRAME tag.
Can CVE-2003-0604 be exploited through web browsers?
Yes, CVE-2003-0604 can be exploited through Internet Explorer and potentially other Microsoft products that process HTML.