Lucene search

[email protected]CVE-2002-0373

HistoryJul 03, 2002 - 4:00 a.m.

CVE-2002-0373

2002-07-0304:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

windowsmediaplayer7.1

wmdm

windows 2000

privilege elevation

cve-2002-0373

6.3 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

12.4%

JSON

The Windows Media Device Manager (WMDM) Service in Microsoft Windows Media Player 7.1 on Windows 2000 systems allows local users to obtain LocalSystem rights via a program that calls the WMDM service to connect to an invalid local storage device, aka “Privilege Elevation through Windows Media Device Manager Service”.

CPENameOperatorVersion
microsoft:windows_media_playermicrosoft windows media playereq7.1

CPE	Name	Operator	Version
microsoft:windows_media_player	microsoft windows media player	eq	7.1

References

www.iss.net/security_center/static/9421.php

www.securityfocus.com/bid/5109

docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-032

6.3 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

12.4%

JSON

Related for CVE-2002-0373

cvelist1 nessus1