Description Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML with an EMBED element containing a long src attribute.
Metrics CVSS Version 4.0 CVSS Version 3.x CVSS Version 2.0 SSVC
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No CVSS 3.x data is available for this CVE.
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration Affected Products Product Versions microsoft windows-nt datacenter_server
datacenter_server sp1
datacenter_server sp2
datacenter_server sp3
datacenter_server sp4
xp sp2
xp_tablet_pc
xp_tablet_pc sp1
xp_tablet_pc sp2
Viewing 5 of 9 versions. View all CPE cpe:2.3:o:microsoft:windows-nt:datacenter_server:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows-nt:datacenter_server:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows-nt:datacenter_server:sp2:*:*:*:*:*:* cpe:2.3:o:microsoft:windows-nt:datacenter_server:sp3:*:*:*:*:*:* cpe:2.3:o:microsoft:windows-nt:datacenter_server:sp4:*:*:*:*:*:* cpe:2.3:o:microsoft:windows-nt:xp:sp2:home:*:*:*:*:* cpe:2.3:o:microsoft:windows-nt:xp_tablet_pc:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows-nt:xp_tablet_pc:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows-nt:xp_tablet_pc:sp2:*:*:*:*:*:* Remediation No remediation found in references. microsoft windows 2000 All versions
CPE cpe:2.3:o:microsoft:windows_2000:*:sp1:pro:*:*:*:*:* cpe:2.3:o:microsoft:windows_2000:*:sp2:pro:*:*:*:*:* cpe:2.3:o:microsoft:windows_2000:*:sp3:pro:*:*:*:*:* cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2000:*:sp4:pro:*:*:*:*:* cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:* Remediation No remediation found in references. microsoft windows 2000 advanced server sp1
sp2
sp3
sp4
CPE cpe:2.3:o:microsoft:windows_2000_advanced_server:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2000_advanced_server:sp1:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2000_advanced_server:sp2:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2000_advanced_server:sp3:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2000_advanced_server:sp4:*:*:*:*:*:*:* Remediation No remediation found in references. microsoft windows 2003 server datacenter_edition
datacenter_edition_64-bit
enterprise_edition
enterprise_edition_64-bit
standard
standard_64-bit
web_edition
Viewing 5 of 7 versions. View all CPE cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:standard:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:web_edition:*:*:*:*:*:*:* Remediation No remediation found in references. microsoft windows server 2000 none
sp1
sp2
sp3
CPE cpe:2.3:o:microsoft:windows_server_2000:none:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2000:sp1:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2000:sp2:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2000:sp3:*:*:*:*:*:*:* Remediation No remediation found in references. microsoft windows server 2003 datacenter_sp1
enterprise_sp1
standard_sp1
web_edition_sp1
CPE cpe:2.3:o:microsoft:windows_server_2003:datacenter_sp1:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2003:enterprise_sp1:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2003:standard_sp1:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2003:web_edition_sp1:*:*:*:*:*:*:* Remediation No remediation found in references. microsoft windows xp All versions
CPE cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:*:pro:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp1:pro:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp2:pro:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:* Remediation No remediation found in references.
Change History 11 change records found show changes
Date Action Recorded By Jun 16, 2026 CVE Modified [email protected] Apr 16, 2026 [email protected] Nov 21, 2024 CVE Modified CVE May 14, 2024 CVE Modified [email protected] Apr 30, 2019 CPE Deprecation Remap [email protected] Oct 30, 2018 CPE Deprecation Remap [email protected] Oct 30, 2018 CPE Deprecation Remap [email protected] Oct 12, 2018 CVE Modified [email protected] Oct 11, 2017 CVE Modified [email protected] Jul 11, 2017 CVE Modified [email protected] Feb 21, 2006 Initial Analysis [email protected]