CVE-2002-0373: High severity microsoft windows media player vulnerability

Published Jul 3, 2002

Updated

The Windows Media Device Manager (WMDM) Service in Microsoft Windows Media Player 7.1 on Windows 2000 systems allows local users to obtain LocalSystem rights via a program that calls the WMDM service to connect to an invalid local storage device, aka "Privilege Elevation through Windows Media Device Manager Service".

Affected Software

1 affected component

Microsoft Windows Media Player=7.1

Event History

Jul 3, 2002

CVE Published

04:00 AM

Apr 2, 2003

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-0373?

CVE-2002-0373 is rated as a critical vulnerability due to its potential for privilege escalation.

How do I fix CVE-2002-0373?

To fix CVE-2002-0373, users should upgrade to a patched version of Microsoft Windows Media Player beyond 7.1.

Who is affected by CVE-2002-0373?

CVE-2002-0373 affects local users on systems running Microsoft Windows Media Player 7.1 on Windows 2000.

What type of attack is CVE-2002-0373 associated with?

CVE-2002-0373 is associated with local privilege escalation attacks allowing users to gain LocalSystem rights.

What component of Windows is involved in CVE-2002-0373?

The vulnerability involves the Windows Media Device Manager (WMDM) service in Microsoft Windows Media Player.