ID CVE-2002-0373
Summary The Windows Media Device Manager (WMDM) Service in Microsoft Windows Media Player 7.1 on Windows 2000 systems allows local users to obtain LocalSystem rights via a program that calls the WMDM service to connect to an invalid local storage device, aka "Privilege Elevation through Windows Media Device Manager Service".
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:windows_media_player:7.1:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:windows_media_player:7.1:*:*:*:*:*:*:*
CVSS
Base: 7.2 (as of 12-10-2018 - 21:31)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:L/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bid 5109
xf mediaplayer-wmdm-privilege-elevation(9421)
Last major update 12-10-2018 - 21:31
Published 03-07-2002 - 04:00
Last modified 12-10-2018 - 21:31
Back to Top