CVE-2015-1728

High

Published: 10/06/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

Microsoft Windows Media Player versions 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a website.

Risk Assessment

Exploitation of this vulnerability could lead to full system compromise, posing a significant security risk to the organization.

Recommendation

It is recommended to update Windows Media Player to the latest version and implement appropriate security measures to mitigate the risk of attack.

Other vulnerabilities in Microsoft Windows Media Player

CVE-2000-0929Medium
Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that is not closed properly, aka the "OCX Attachment" vulnerability.

Original NVD description (English source)

Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "Windows Media Player RCE via DataObject Vulnerability."

Vulnerability data from NVD (NIST) · CISA KEV · EPSS