CVE-2002-1844: Microsoft Windows Media Player

High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Microsoft Windows Media Player (WMP) 6.3, when installed on Solaris, installs executables with world-writable permissions, which allows local users to delete or modify the executables to gain privileges.

Affected products

• Microsoft Windows Media Player: version 6.3 only

Published 2002-12-31. Last modified 2026-06-16.