NVD

Id
74179  
Name
CVE-2003-1107  
Description
The DHTML capability in Microsoft Windows Media Player (WMP) 6.4, 7.0, 7.1, and 9 may run certain URL commands from a security zone that is less trusted than the current zone, which allows attackers to bypass intended access restrictions.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2003-12-31  
Modified Date
2017-07-10  
Seq
2003-1107  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
381378 74179 CVE-2003-1107 828026  View
381379 74179 CVE-2003-1107 VU#222044  View
381380 74179 CVE-2003-1107 mediaplayer-dhtml-code-execution(13375)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63566 JVNDB-2003-000292 Microsoft Windows Media Player における不適切な URL コマンド実行の脆弱性 Microsoft Windows Media Player の URL スクリプトコマンドの解釈部分には、URL スクリプトコマンドの起動元の URL のゾーンと、URL スクリプトコマンドで指定された URL のゾーンの信頼度の違いに関する妥当性の確認されない脆弱性が存在します。 CVE-2003-1107 7930 CVE-2003-1107 74179 5.1 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000292.html 2003-10-03 2007-04-01 View