CVE-2001-0137

Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a skin file named skin.wmz, then referencing that skin in the codebase parameter to an applet tag, aka the Windows Media Player Skins File Download" vulnerability.

Affected products

Internet Explorer, Windows Media Player

Microsoft Windows Media Player

= 7

Fix

Available

CVSS 2.0

5.1 MEDIUM

EPSS

22.2% (97th percentile)

NVD status

Modified

Published

2001-05-07