CVE-2003-1107

MEDIUM 5.1CVE-2003-1107 · Published 31/12/2003 · updated 16/06/2026

In short

CVE-2003-1107 is a MEDIUM (CVSS 5.1) vulnerability affecting windows media player (microsoft).
Chance of exploitation in the next 30 days (EPSS): 5.2%, higher than 92.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
windows media player microsoft	`= 6.4= 7= 7.1= 9`	No fix yet

Description

The DHTML capability in Microsoft Windows Media Player (WMP) 6.4, 7.0, 7.1, and 9 may run certain URL commands from a security zone that is less trusted than the current zone, which allows attackers to bypass intended access restrictions.

References

support.microsoft.com/default.aspx
kb.cert.org/vuls/id/222044 · US Government Resource
exchange.xforce.ibmcloud.com/vulnerabilities/13375

More vulnerabilities in windows media player

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

windows media player

microsoft

= 6.4= 7= 7.1= 9

No fix yet

More vulnerabilities in windows media player

See all →