Windows Media Player Remote Code Execution Risk via Malformed Skin Files

CVE-2007-3035

Summary

A vulnerability has been identified in Microsoft Windows Media Player versions 7.1, 9, 10, and 11 that could allow remote attackers to execute arbitrary code on the affected system. This is achieved through the manipulation of specially crafted skin files (WMZ or WMD) where improper handling of header information during decompression can lead to execution of malicious code. Users of the affected versions are encouraged to update to the latest patches to mitigate potential exploits.

References