CVE-2002-1847

Published Dec 31, 2002

Last updated 4 years ago

CVSS info 7.5

Overview

Description: Buffer overflow in mplay32.exe of Microsoft Windows Media Player (WMP) 6.3 through 7.1 allows remote attackers to execute arbitrary commands via a long mp3 filename command line argument. NOTE: since the only known attack vector requires command line access, this may not be a vulnerability.
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:microsoft:windows_media_player:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1CDD85BA-0CDA-4EF2-A447-84A4F7B94B3A"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:windows_media_player:6.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D5341552-9A9B-4F79-906B-E58E302CCE7E"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:windows_media_player:6.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1CE4EC55-63B7-409E-9E4D-DBC5A36D2F5A"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:windows_media_player:7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E5C9557F-DCBF-48BA-9045-AA5DF58F604A"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:windows_media_player:7.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C66EBE04-CE6A-4B81-BC09-60DC5DB121E3"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 2.0

Weaknesses

Social media

Configurations

References