Microsoft Windows Media Player 9 allows for writing to audio files from Internet Explorer, which may allow for code execution in a trusted zone. It also suffers from a file existence determination flaw.
4d1d231b66266a8e3548977c91e0751ddf0c2f4ba91f9fd9343d1f8dc25a2d89