Lucene search

[email protected]CVE-2002-0372

HistoryApr 02, 2003 - 5:00 a.m.

CVE-2002-0372

2003-04-0205:00:00

[email protected]

web.nvd.nist.gov

microsoft

windows media player

internet explorer

security bypass

cve-2002-0372

nvd

6.7 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.013 Low

EPSS

Percentile

85.6%

JSON

Microsoft Windows Media Player versions 6.4 and 7.1 and Media Player for Windows XP allow remote attackers to bypass Internet Explorer’s (IE) security mechanisms and run code via an executable .wma media file with a license installation requirement stored in the IE cache, aka the “Cache Path Disclosure via Windows Media Player”.

Affected configurations

NVD

Node

microsoftwindows_media_playerMatch-

microsoftwindows_media_playerMatch6.4

microsoftwindows_media_playerMatch7.1

CPENameOperatorVersion
microsoft:windows_media_playermicrosoft windows media playereq-
microsoft:windows_media_playermicrosoft windows media playereq6.4
microsoft:windows_media_playermicrosoft windows media playereq7.1

CPE	Name	Operator	Version
microsoft:windows_media_player	microsoft windows media player	eq	-
microsoft:windows_media_player	microsoft windows media player	eq	6.4
microsoft:windows_media_player	microsoft windows media player	eq	7.1

References

www.iss.net/security_center/static/9420.php

www.securityfocus.com/bid/5107

docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-032

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A281

6.7 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.013 Low

EPSS

Percentile

85.6%

JSON

Related for CVE-2002-0372

cvelist1 nvd1 nessus1