« Volver al listado

CVE-2015-1728

Estado: ModificadaAlta (9.3)—

Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "Windows Media Player RCE via DataObject Vulnerability."

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Microsoft — Windows Media Player

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-1728",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secure@microsoft.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-06-10T01:59:09.647",
  "references": [
    {
      "url": "http://www.securitytracker.com/id/1032522",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "secure@microsoft.com"
    },
    {
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-057",
      "source": "secure@microsoft.com"
    },
    {
      "url": "https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1200",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "secure@microsoft.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1032522",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-057",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1200",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-17"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka \"Windows Media Player RCE via DataObject Vulnerability.\""
    },
    {
      "lang": "es",
      "value": "Microsoft Windows Media Player 10 hasta 12 permite a atacantes remotos ejecutar código a través de un DataObject manipulado en un sitio web, también conocido como 'vulnerabilidad de DataObject a través de RCE Windows Media Player.'"
    }
  ],
  "lastModified": "2026-06-17T00:22:53.473",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:windows_media_player:10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C28602CC-7866-4C30-B518-055923599A18"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:windows_media_player:10.00.00.3646:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "141C8502-881B-4555-A8F0-D31B3E578906"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:windows_media_player:10.00.00.3990:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "43134A65-ADAA-4734-8B63-F96A9189FE34"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:windows_media_player:10.00.00.4019:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CCD860A9-920B-43CA-B33D-3D3C0FCDAD77"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:windows_media_player:10.00.00.4036:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "971E1A0D-CB1D-4C6D-A9AC-FEBE8BAB7CBA"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:windows_media_player:11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B27BB8B0-BC24-4A3F-A18B-63D57AB4799B"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:windows_media_player:11.0.5721.5145:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C30B014E-E690-4D95-8E0E-D38429A38704"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:windows_media_player:11.0.5721.5230:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "67E5BD38-EC42-4709-9B8C-2E3C4A78ED7E"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:windows_media_player:11.0.6000.6324:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FE3942D8-A937-482F-8C95-99DF29102FED"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:windows_media_player:12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3E5A4781-240A-4E84-AEA1-4542BEEF41CF"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secure@microsoft.com"
}