CVE-2001-0148

The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via javascript URLs, a variant of the "Frame Domain Verification" vulnerability.

Affected products

Internet Explorer, Windows Media Player

Microsoft Windows Media Player

= 7

Fix

Available

CVSS 2.0

7.5 HIGH

EPSS

26.8% (98th percentile)

NVD status

Modified

Published

2001-05-07