CVEvulnerability

CVE-2002-0372

7.5 HIGH Published 2002-07-03 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2002-07-03
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Microsoft Windows Media Player versions 6.4 and 7.1 and Media Player for Windows XP allow remote attackers to bypass Internet Explorer's (IE) security mechanisms and run code via an executable .wma media file with a license installation requirement stored in the IE cache, aka the "Cache Path Disclosure via Windows Media Player".

Affected configurations

• microsoft windows media player • microsoft windows media player 6.4 • microsoft windows media player 7.1

References

http://www.iss.net/security_center/static/9420.php www.iss.net
http://www.securityfocus.com/bid/5107 www.securityfocus.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-032 docs.microsoft.com
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A281 oval.cisecurity.org
http://www.iss.net/security_center/static/9420.php www.iss.net
http://www.securityfocus.com/bid/5107 www.securityfocus.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-032 docs.microsoft.com
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A281 oval.cisecurity.org