CVE-2001-0243

Published Jun 27, 2001

Last updated 6 years ago

Overview

Description: Windows Media Player 7 and earlier stores Internet shortcuts in a user's Temporary Files folder with a fixed filename instead of in the Internet Explorer cache, which causes the HTML in those shortcuts to run in the Local Computer Zone instead of the Internet Zone, which allows remote attackers to read certain files.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:microsoft:windows_media_player:6.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1CE4EC55-63B7-409E-9E4D-DBC5A36D2F5A"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:windows_media_player:7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E5C9557F-DCBF-48BA-9045-AA5DF58F604A"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References