7.5
CVSSv2

CVE-2002-1847

Published: 31/12/2002 Updated: 15/06/2021
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Buffer overflow in mplay32.exe of Microsoft Windows Media Player (WMP) 6.3 up to and including 7.1 allows remote malicious users to execute arbitrary commands via a long mp3 filename command line argument. NOTE: since the only known attack vector requires command line access, this may not be a vulnerability.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft windows media player 6.3

microsoft windows media player 6.4

microsoft windows media player 7

microsoft windows media player 7.1

microsoft windows media player -

Exploits

source: wwwsecurityfocuscom/bid/5357/info The Microsoft Windows Media Player executable is prone to a buffer overflow condition when invoked with an oversized filename Since the program is executed in the context of the user invoking it, it is not likely that a local attacker could exploit this issue to gain elevated privileges However ...