Intrusion PreventionMS.Media.Player.DirectoryTraversal
Description
This indicates an attempt to execute potentially malicious code via Microsoft Windows Media Player.
Due to inadequate input sanitization in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP, remote attackers may be able to execute arbitrary code on a target system by passing a skins file with a specially crafted URL to the vulnerable application.
Affected Products
Microsoft Windows Media Player XP
Microsoft Windows Media Player 7.1
Impact
Attackers can execute arbitrary code remotely on the victim system.
Recommended Actions
Apply the appropriate patches from Microsoft and/or upgrade the program to the latest non-vulnerable version.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2019-11-22 | 15.729 | Name:MS. MediaPlayer. DirectoryTraversal:MS. Media. Player. DirectoryTraversal |
| ID | 12305 |
| Created | Sep 11, 2006 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2003-0228 |
| Exploit Prediction Score | 95.34% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | MediaPlayer |