CVE-2015-1728: Critical severity Microsoft Windows Media Player vulnerability
Published Jun 10, 2015
·Updated
Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "Windows Media Player RCE via DataObject Vulnerability."
Affected Software
10 affected components
Microsoft Windows Media Player=10
Microsoft Windows Media Player=10.00.00.3646
Microsoft Windows Media Player=10.00.00.3990
Microsoft Windows Media Player=10.00.00.4019
Microsoft Windows Media Player=10.00.00.4036
Microsoft Windows Media Player=11
Microsoft Windows Media Player=11.0.5721.5145
Microsoft Windows Media Player=11.0.5721.5230
Microsoft Windows Media Player=11.0.6000.6324
Microsoft Windows Media Player=12
Event History
Jun 10, 2015
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-1728?
CVE-2015-1728 has a severity rating of critical due to its potential for remote code execution.
2
How can I mitigate CVE-2015-1728?
To mitigate CVE-2015-1728, update Microsoft Windows Media Player to the latest version available.
3
Which versions of Windows Media Player are affected by CVE-2015-1728?
CVE-2015-1728 affects Windows Media Player versions 10, 11, and 12.
4
What type of vulnerability is CVE-2015-1728?
CVE-2015-1728 is a remote code execution vulnerability that can be exploited through a crafted DataObject.
5
Is there a specific attack vector for CVE-2015-1728?
CVE-2015-1728 can be exploited via a malicious website that presents a crafted DataObject.