CVE-2002-1847
Windows Media Player 6.3-7.1 - Buffer Overflow via MP3 Filename Command Line Argument
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2002-1847. PoCs published by ken@FTU.
AI-analyzed exploit summary The exploit describes a buffer overflow vulnerability in Microsoft Windows Media Player when invoked with an oversized filename. It provides commands to reproduce the issue locally and remotely via an unpatched IIS server.
Description
Buffer overflow in mplay32.exe of Microsoft Windows Media Player (WMP) 6.3 through 7.1 allows remote attackers to execute arbitrary commands via a long mp3 filename command line argument. NOTE: since the only known attack vector requires command line access, this may not be a vulnerability.
Exploits (1)
The exploit describes a buffer overflow vulnerability in Microsoft Windows Media Player when invoked with an oversized filename. It provides commands to reproduce the issue locally and remotely via an unpatched IIS server.