CVE-2003-1107
The DHTML capability in Microsoft Windows Media Player (WMP) 6.4, 7.0, 7.1, and 9 may run certain URL commands from a security zone that is less trusted than the current zone, which allows attackers to bypass intended access restrictions.
Scoring
- CVSS base score
- 0.29
- EPSS probability
- 7.37%
- Published
- 2005-03-11
- Last modified
- 2026-03-16
Affected products
- n/a n/a