CVE-2007-3035

Severity: high (CVSS 7.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 25.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-08-14 · updated 2026-06-16

Description

Unspecified vulnerability in Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafted header information that is not properly handled during decompression, aka "Windows Media Player Code Execution Vulnerability Decompressing Skins."

Affected products

Microsoft Corporation Windows Media Player: 7.1, 9, 10, 11

References

http://secunia.com/advisories/26433
http://securitytracker.com/id?1018565
http://www.securityfocus.com/archive/1/476548/100/0/threaded
http://www.securityfocus.com/bid/25305
http://www.us-cert.gov/cas/techalerts/TA07-226A.html
http://www.vupen.com/english/advisories/2007/2871
http://www.zerodayinitiative.com/advisories/ZDI-07-047.html
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-047
https://exchange.xforce.ibmcloud.com/vulnerabilities/35895
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1352
http://secunia.com/advisories/26433
http://securitytracker.com/id?1018565

Get alerted when CVE-2007-3035 or the next vulnerability affects your stack