CVE-2002-0373: Microsoft Windows Media Player

High severity, CVSS 7.2. EPSS: 1.8% chance of exploitation in the next 30 days.

The Windows Media Device Manager (WMDM) Service in Microsoft Windows Media Player 7.1 on Windows 2000 systems allows local users to obtain LocalSystem rights via a program that calls the WMDM service to connect to an invalid local storage device, aka "Privilege Elevation through Windows Media Device Manager Service".

Affected products

• Microsoft Windows Media Player: version 7.1 only

Published 2002-07-03. Last modified 2026-06-16.