CVE-2002-1847

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2002-1847
Buffer overflow in mplay32.exe of Microsoft Windows Media Player (WMP) 6.3 through 7.1 allows remote attackers to execute arbitrary commands via a long mp3 filename command line argument. NOTE: since the only known attack vector requires command line access, this may not be a vulnerability.

7.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://online.securityfocus.com/archive/1/285082
http://www.iss.net/security_center/static/9727.php
http://www.securityfocus.com/bid/5357 Exploit
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microsoft:windows_media_player:-:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:windows_media_player:6.3:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:windows_media_player:6.4:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:windows_media_player:7:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:windows_media_player:7.1:*:*:*:*:*:*:*
History

15 Jun 2021, 20:15

Type Values Removed Values Added
Summary Buffer overflow in mplay32.exe of Microsoft Windows Media Player (WMP) 6.3 through 7.1 allows remote attackers to execute arbitrary commands via a long mp3 filename command line argument. NOTE: since the only known attack vector requires command line access, this may not be a vulnerability. Buffer overflow in mplay32.exe of Microsoft Windows Media Player (WMP) 6.3 through 7.1 allows remote attackers to execute arbitrary commands via a long mp3 filename command line argument. NOTE: since the only known attack vector requires command line access, this may not be a vulnerability.
Information

Published : 2002-12-31 05:00

Updated : 2024-02-04 16:31

NVD link : CVE-2002-1847

Mitre link : CVE-2002-1847

CVE.ORG link : CVE-2002-1847

JSON object : View

Products Affected

microsoft

  • windows_media_player
CWE
NVD-CWE-Other