CVE-2002-0372: High severity microsoft windows media player vulnerability

Published Jul 3, 2002

Updated

Microsoft Windows Media Player versions 6.4 and 7.1 and Media Player for Windows XP allow remote attackers to bypass Internet Explorer's (IE) security mechanisms and run code via an executable .wma media file with a license installation requirement stored in the IE cache, aka the "Cache Path Disclosure via Windows Media Player".

Affected Software

3 affected components

Microsoft Windows Media Player=7.1

Microsoft Windows Media Player=6.4

Microsoft Windows Media Player

Event History

Jul 3, 2002

CVE Published

04:00 AM

Apr 2, 2003

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-0372?

CVE-2002-0372 is rated as a moderate severity vulnerability due to its ability to bypass security mechanisms.

How do I fix CVE-2002-0372?

To fix CVE-2002-0372, upgrade to a newer version of Microsoft Windows Media Player that is not affected by this vulnerability.

What versions of Microsoft Windows Media Player are affected by CVE-2002-0372?

CVE-2002-0372 affects Microsoft Windows Media Player versions 6.4 and 7.1.

What type of attack does CVE-2002-0372 allow?

CVE-2002-0372 allows remote attackers to run arbitrary code by exploiting the .wma media file vulnerability.

Is CVE-2002-0372 still a threat today?

While CVE-2002-0372 was a concern in the past, most systems have since been updated, significantly reducing its impact.