CVE-2015-1728
high · 9.3Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "Windows Media Player RCE via DataObject Vulnerability."
9.3
CVSS
17.7%
EPSS (exploit prob.)
97th
EPSS percentile
2015-06-10
Published
AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-17
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | windows_media_player | 10 |
| microsoft | windows_media_player | 10.00.00.3646 |
| microsoft | windows_media_player | 10.00.00.3990 |
| microsoft | windows_media_player | 10.00.00.4019 |
| microsoft | windows_media_player | 10.00.00.4036 |
| microsoft | windows_media_player | 11 |
| microsoft | windows_media_player | 11.0.5721.5145 |
| microsoft | windows_media_player | 11.0.5721.5230 |
| microsoft | windows_media_player | 11.0.6000.6324 |
| microsoft | windows_media_player | 12 |
Check a specific version with /api/v1/cve/match.
References
- http://www.securitytracker.com/id/1032522
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-057
- https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1200
- http://www.securitytracker.com/id/1032522
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-057
- https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1200
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2015-1728