VYPR
Unrated severityNVD Advisory· Published Jun 10, 2015· Updated May 6, 2026

CVE-2015-1728

CVE-2015-1728

Description

Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "Windows Media Player RCE via DataObject Vulnerability."

Affected products

10
  • cpe:2.3:a:microsoft:windows_media_player:10.00.00.3646:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:a:microsoft:windows_media_player:10.00.00.3646:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:windows_media_player:10.00.00.3990:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:windows_media_player:10.00.00.4019:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:windows_media_player:10.00.00.4036:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:windows_media_player:11:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:windows_media_player:11.0.5721.5145:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:windows_media_player:11.0.5721.5230:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:windows_media_player:11.0.6000.6324:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:windows_media_player:12:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:windows_media_player:10:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.