← All CVEs

CVE-2001-0137

medium · 5.1

Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a skin file named skin.wmz, then referencing that skin in the codebase parameter to an applet tag, aka the Windows Media Player Skins File Download" vulnerability.

5.1
CVSS
22.2%
EPSS (exploit prob.)
98th
EPSS percentile
2001-03-12
Published

AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected products

VendorProductAffected versions
microsoftwindows_media_player7

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2001-0137