Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafted header information that causes a size mismatch between compressed and decompressed data and triggers a heap-based buffer overflow, aka "Windows Media Player Code Execution Vulnerability Parsing Skins."

The remote host is running Windows Media Player.  There is a vulnerability in the remote version of this software that may allow an attacker to execute arbitrary code on the remote host.  To exploit this flaw, one attacker would need to set up a rogue PNG image and send it to a victim on the remote host.

There is a vulnerability in the remote version of Windows Media Player that may allow an attacker to execute arbitrary code on the remote host.

To exploit this flaw, one attacker would need to set up a rogue PNG image and send it to a victim on the remote host.

ID	Name	Product	Family	Severity
4176	Windows Media Player Remote Code Execution Vulnerability (936782)	Nessus Network Monitor	Web Clients	medium
4175	Windows Media Player Remote Code Execution Vulnerability (936782)	Nessus Network Monitor	Web Clients	medium
4174	Windows Media Player Remote Code Execution Vulnerability (936782)	Nessus Network Monitor	Web Clients	medium
4173	Windows Media Player Remote Code Execution Vulnerability (936782)	Nessus Network Monitor	Web Clients	medium
4172	Windows Media Player Remote Code Execution Vulnerability (936782)	Nessus Network Monitor	Web Clients	medium
4171	Windows Media Player Remote Code Execution Vulnerability (936782)	Nessus Network Monitor	Web Clients	medium
25885	MS07-047: Vulnerability in Windows Media Player Could Allow Remote Code Execution (936782)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2007-3037

high

Tenable Plugins

medium

medium

medium

medium

medium

medium

high