Remote Code Execution Vulnerability in Microsoft Windows Media Player

CVE-2015-1728

What is CVE-2015-1728?

A vulnerability in Microsoft Windows Media Player versions 10 through 12 enables remote attackers to execute arbitrary code on a targeted system. This can occur through a specially crafted DataObject on a compromised website. Successful exploitation of this vulnerability could allow the attacker to gain control of the affected system, install programs, view, change, or delete data, and create new accounts with full user rights. Users are encouraged to apply the appropriate security updates to mitigate the risk associated with this vulnerability.

References