CVE-2000-1112

Microsoft Windows Media Player 7 executes scripts in custom skin (.WMS) files, which could allow remote attackers to gain privileges via a skin that contains a malicious script, aka the ".WMS Script Execution" vulnerability.

Affected products

Windows Media Player

Microsoft Windows Media Player

= 6.4, 7

Fix

Available

CVSS 2.0

4.6 MEDIUM

EPSS

14.0% (96th percentile)

NVD status

Modified

Published

2001-01-22