CVE-2002-1847: Microsoft Windows Media Player

High severity, CVSS 7.5. EPSS: 33.6% chance of exploitation in the next 30 days.

Buffer overflow in mplay32.exe of Microsoft Windows Media Player (WMP) 6.3 through 7.1 allows remote attackers to execute arbitrary commands via a long mp3 filename command line argument. NOTE: since the only known attack vector requires command line access, this may not be a vulnerability.

Affected products

• Microsoft Windows Media Player: affected versions not specified; version 6.3 only; version 6.4 only; version 7 only; version 7.1 only

Published 2002-12-31. Last modified 2026-06-16.