CVE-2002-1847

Description

Buffer overflow in mplay32.exe of Microsoft Windows Media Player (WMP) 6.3 through 7.1 allows remote attackers to execute arbitrary commands via a long mp3 filename command line argument. NOTE: since the only known attack vector requires command line access, this may not be a vulnerability.

Affected products

• microsoft / windows_media_player
• microsoft / windows_media_player6.3 – 6.3
• microsoft / windows_media_player6.4 – 6.4
• microsoft / windows_media_player7 – 7
• microsoft / windows_media_player7.1 – 7.1

Exploits & proofs of concept

• exploit-dbMicrosoft Windows Media Player 6/7 - Filename Buffer Overflowby ken@FTU

References

• MISChttp://online.securityfocus.com/archive/1/285082
• MISChttp://www.securityfocus.com/bid/5357
• MISChttp://www.iss.net/security_center/static/9727.php