VULNERABILITY INTELLIGENCE
CVE-2007-3035
CVSS score7.6 HIGH
EPSS probability25.00%
CISA KEVNot currently listed
Published2007-08-14
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:C/I:C/A:C
Description
Unspecified vulnerability in Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafted header information that is not properly handled during decompression, aka "Windows Media Player Code Execution Vulnerability Decompressing Skins."
Primary references
- secure@microsoft.com — Vendor Advisory
- secure@microsoft.com
- secure@microsoft.com
- secure@microsoft.com
- secure@microsoft.com — US Government Resource
- secure@microsoft.com — Vendor Advisory
- secure@microsoft.com
- secure@microsoft.com
- secure@microsoft.com
- secure@microsoft.com
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108