CVE-2007-5095
Last modified
CVE-2007-5095 is a vulnerability of currently unknown severity. Microsoft Windows Media Player (WMP) 9 on Windows XP SP2 invokes Internet Explorer to render HTML documents contained inside some media files, regardless of what default web browser is configured, which might allow remote attackers to exploit vulnerabilities in software that the user does not expect to run, as demonstrated by the HTMLView parameter in an .asx file.. EPSS estimates a 15.17% chance of exploitation in the next 30 days.
Description
Microsoft Windows Media Player (WMP) 9 on Windows XP SP2 invokes Internet Explorer to render HTML documents contained inside some media files, regardless of what default web browser is configured, which might allow remote attackers to exploit vulnerabilities in software that the user does not expect to run, as demonstrated by the HTMLView parameter in an .asx file.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows Media Player | 9 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-5095?
How severe is CVE-2007-5095?
How do I fix CVE-2007-5095?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-5089PHP remote file inclusion vulnerability in php-inc/log.inc.p…
- CVE-2007-5090Unspecified vulnerability in IBM Rational ClearQuest (CQ), w…
- CVE-2007-5091Multiple cross-site scripting (XSS) vulnerabilities in eGrou…
- CVE-2007-5092Directory traversal vulnerability in index.php in the Dance …
- CVE-2007-5093The disconnect method in the Philips USB Webcam (pwc) driver…
- CVE-2007-5094Heap-based buffer overflow in iaspam.dll in the SMTP Server …
- CVE-2007-5096PHP remote file inclusion vulnerability in modules/webmail2/…
- CVE-2007-5097PHP remote file inclusion vulnerability in lib/classes/offl_…9.8
- CVE-2007-5098Multiple PHP remote file inclusion vulnerabilities in DFD Ca…
- CVE-2007-5099PHP remote file inclusion vulnerability in show.php in David…
- CVE-2007-5100Multiple PHP remote file inclusion vulnerabilities in phpBB …
- CVE-2007-5101ChironFS before 1.0 RC7 sets user/group ownership to the mou…
Are you affected by CVE-2007-5095?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST