PT-2002-1406 · Microsoft · Windows Media Player

Publicado 2002-05-03 · Atualizado 2016-10-18 · CVE-2002-0340

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Windows Media Player versions 8.00.00.4477 and possibly other versions

Description The issue allows attackers to conduct unauthorized activities via Trojan horse files containing .wmf content. This is because Windows Media Player automatically detects and executes .wmf and other content, even when the file's extension or content type does not specify .wmf.

Recommendations For version 8.00.00.4477, consider disabling the automatic detection and execution of .wmf content until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2002-0340

Produtos afetados

Windows Media Player

Referências · 2

• http://marc.info/?l=bugtraq&m=101447771102582&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0340 · Nota de Segurança