Unscored severity · published Nov 28, 2006
CVE-2006-6134
Heap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Microsoft Windows Media Player (WMP) 10.00.00.4036 on Windows XP SP2, Server 2003, and Server 2003…
–
CVSS
44.1%
EPSS
No
On KEV
Description
Heap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Microsoft Windows Media Player (WMP) 10.00.00.4036 on Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long HREF attribute, using an unrecognized protocol, in a REF element in an ASX PlayList file.
Exploitation
Is it being used?
Exploit prediction (EPSS)44.1% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WM
Windows Media Player · Microsoft
10.00.00.4036 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6134
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6134
blogs.technet.com
http://blogs.technet.com/msrc/archive/2006/12/07/public-proof-of-concept-code-for-asx-file-format-isssue.aspx
research.eeye.com
http://research.eeye.com/html/alerts/zeroday/20061122.html
Vendor Advisory
http://secunia.com/advisories/22971
securityreason.com
http://securityreason.com/securityalert/1922
securitytracker.com
http://securitytracker.com/id?1017354
support.avaya.com
http://support.avaya.com/elmodocs2/security/ASA-2006-274.htm
More from Windows Media Player
7.8
CVE-2002-1844
Microsoft Windows Media Player (WMP) 6.3, when installed on Solaris, installs executables with world-writable permissions, which allows local users to delete or modify the…
2.5
CVE-2017-11768
Windows Media Player in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows…
–
CVE-2015-1728
Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "Windows Media Player RCE via DataObject…
–
CVE-2014-2671
Microsoft Windows Media Player (WMP) 11.0.5721.5230 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a…
–
CVE-2013-3127
The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Format Runtime 11 and Windows Media Player…