CVE-2002-0372
high · 7.5Microsoft Windows Media Player versions 6.4 and 7.1 and Media Player for Windows XP allow remote attackers to bypass Internet Explorer's (IE) security mechanisms and run code via an executable .wma media file with a license installation requirement stored in the IE cache, aka the "Cache Path Disclosure via Windows Media Player".
7.5
CVSS
14.4%
EPSS (exploit prob.)
96th
EPSS percentile
2002-07-03
Published
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | windows_media_player | all versions |
| microsoft | windows_media_player | 6.4 |
| microsoft | windows_media_player | 7.1 |
Check a specific version with /api/v1/cve/match.
References
- http://www.iss.net/security_center/static/9420.php
- http://www.securityfocus.com/bid/5107
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-032
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A281
- http://www.iss.net/security_center/static/9420.php
- http://www.securityfocus.com/bid/5107
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-032
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A281
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2002-0372