CVE-2007-3037: Buffer Overflow
Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafted header information that causes a size mismatch between compressed and decompressed data and triggers a heap-based buffer overflow, aka "Windows Media Player Code Execution Vulnerability Parsing Skins."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3037?
CVE-2007-3037 is considered a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2007-3037?
To fix CVE-2007-3037, update Microsoft Windows Media Player to the latest version provided by Microsoft.
Which versions of Windows Media Player are affected by CVE-2007-3037?
CVE-2007-3037 affects Microsoft Windows Media Player versions 7.1, 9, 10, and 11.
What kind of attack does CVE-2007-3037 enable?
CVE-2007-3037 enables remote attackers to execute arbitrary code on the victim's system.
How can users protect themselves from CVE-2007-3037?
Users can protect themselves from CVE-2007-3037 by avoiding the opening of suspicious WMZ or WMD skin files.