Title: Windows Media Player WMDM Privilege Escalation Vulnerability
Severity: HIGH
Description:
Microsoft Windows Media Player is distributed with multiple versions of the Microsoft Windows Operating System.
A privilege escalation vulnerability has been reported that will allow an attacker with local log-on privileges to gain access under the privilege level of the operating system itself.
This vulnerabilty only affects Windows Media Player 7.1 on Windows 2000 systems, other Windows versions are not affected. The flaw lies in the use by Windows Media Device Manager (WMDM). The WMDM will sometimes fail to recognize an invalid device request. If that request is for a specific device, WMDM processes it under the context of Local System.
This enables the attacker to have access to a local resource with Local System privileges. An attacker can use this access to launch other programs, add, delete or modify files and add administrators.
Direct physical access is required and Terminal service logins are not affected by this vulnerability.
This vulnerability was originally described in Bugtraq ID 5107. Individual vulnerabilities are being assigned unique Bugtraq IDs as analysis is completed.
Affected Products:
- Microsoft Windows Media Player 7.1.0
References:
- Microsoft: Microsoft Security Bulletin MS02-032
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
