PT-2002-1435 · Microsoft · Internet Explorer+1

Publicado 2002-07-03 · Atualizado 2018-10-30 · CVE-2002-0372

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows Media Player versions 6.4 and 7.1 Media Player for Windows XP

Description The issue allows remote attackers to bypass Internet Explorer's security mechanisms and run code via an executable .wma media file with a license installation requirement stored in the Internet Explorer cache.

Recommendations For Microsoft Windows Media Player versions 6.4 and 7.1, consider disabling the execution of .wma files until a patch is available. For Media Player for Windows XP, restrict access to the executable .wma media files to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-0372

Produtos afetados

Internet Explorer

Windows Media Player

Referências · 5

• http://securityfocus.com/bid/5107 · Nota
• http://iss.net/security_center/static/9420.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0372 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A281 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-032 · Aviso do Fabricante