CVE Catalog

CVE-2000-0929

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
14.36%

96th percentile - higher than 96% of all known CVEs

Summary

Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that is not closed properly, aka the "OCX Attachment" vulnerability.

Risk Assessment

An attacker can remotely crash or hang the victim's email client, potentially leading to data loss or work interruption. This could be exploited for a widespread attack on multiple users.

Recommendation

Update Windows Media Player to the latest version or disable embedded OCX controls in email clients. Avoid opening RTF messages from untrusted sources.

Other vulnerabilities in Microsoft Windows Media Player

Original NVD description (English source)

Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that is not closed properly, aka the "OCX Attachment" vulnerability.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS