Back to list
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Windows Media Player directory traversal vulnerability
May 07 2003 05:33PM
Jouko Pynnonen (jouko solutions fi)
Windows Media Player versions 7 and 8 are vulnerable to a directory
traversal attack when skin files (*.WMZ) are downloaded from Internet.
The vulnerability allows malicious users to upload an arbitrary file to
an arbitrary location when a victim user views a web page.
[ more ]
Copyright 2010, SecurityFocus