CVE-2003-0604
First published: Tue Jul 29 2003(Updated: )
Windows Media Player (WMP) 7 and 8, as running on Internet Explorer and possibly other Microsoft products that process HTML, allows remote attackers to bypass zone restrictions and access or execute arbitrary files via an IFRAME tag pointing to an ASF file whose Content-location contains a File:// URL.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Windows Media Player | =7 | |
| Windows Media Player | =8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.pivx.com/larholm/unpatched/
- http://marc.info/?l=ntbugtraq&m=105899408520292&w=2
- http://marc.info/?l=bugtraq&m=105899261818572&w=2
- http://marc.info/?l=bugtraq&m=105906867322856&w=2
- http://marc.info/?l=ntbugtraq&m=105906261314411&w=2
- http://www.malware.com/once.again!.html
- http://www.malware.com/once.again%21.html
Frequently Asked Questions
What is the severity of CVE-2003-0604?
CVE-2003-0604 is considered a high severity vulnerability due to its ability to bypass zone restrictions and execute arbitrary files.
How do I fix CVE-2003-0604?
To fix CVE-2003-0604, users should update to a patched version of Windows Media Player or apply any security updates provided by Microsoft.
Which versions of Windows Media Player are affected by CVE-2003-0604?
CVE-2003-0604 affects Microsoft Windows Media Player versions 7 and 8.
What type of attack does CVE-2003-0604 allow?
CVE-2003-0604 allows remote attackers to access or execute arbitrary files on the victim's system through an IFRAME tag.
Can CVE-2003-0604 be exploited through web browsers?
Yes, CVE-2003-0604 can be exploited through Internet Explorer and potentially other Microsoft products that process HTML.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/references
- agent/severity
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- collector/nvd-historical
- agent/author
- vendor/microsoft
- canonical/windows media player
- version/windows media player/7
- version/windows media player/8