CVSS: 9.3EPSS: 95%CPEs: 11EXPL: 3CVE-2006-0006 – Microsoft Windows Media Player 7.1 < 10 - '.BMP' Heap Overflow (PoC) (MS06-005)
https://notcve.org/view.php?id=CVE-2006-0006
Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Windows 2000 SP4 and XP SP1, and Media Player 10 on XP SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted bitmap (.BMP) file that specifies a size of 0 but contains additional data. • https://www.exploit-db.com/exploits/1500 https://www.exploit-db.com/exploits/1502 http://secunia.com/advisories/18835 http://securityreason.com/securityalert/423 http://securitytracker.com/id?1015627 http://www.eeye.com/html/research/advisories/AD20060214.html http://www.kb.cert.org/vuls/id/291396 http://www.securityfocus.com/archive/1/424983/100/0/threaded http://www.securityfocus.com/archive/1/425158/100/0/threaded http://www.securityfocus.com/bid/16633 http://w • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.0EPSS: 28%CPEs: 1EXPL: 0CVE-2005-2128
https://notcve.org/view.php?id=CVE-2005-2128
QUARTZ.DLL in Microsoft Windows Media Player 9 allows remote attackers to write a null byte to arbitrary memory via an AVI file with a crafted strn element with a modified length value. • http://secunia.com/advisories/17160 http://secunia.com/advisories/17172 http://secunia.com/advisories/17509 http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf http://www.eeye.com/html/research/advisories/AD20051011a.html http://www.kb.cert.org/vuls/id/995220 http://www.osvdb.org/18822 http://www.securityfocus.com/bid/15063 http://www.us-cert.gov/cas/techalerts/TA05-284A.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-050 htt •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2005-1574
https://notcve.org/view.php?id=CVE-2005-1574
Windows Media Player 9 and 10, in certain cases, allows content protected by Windows Media Digital Rights Management (WMDRM) to redirect the user to a web site to obtain a license, even when the "Acquire licenses automatically for protected content" setting is not enabled. • http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B892313 •
CVSS: 5.0EPSS: 65%CPEs: 1EXPL: 2CVE-2004-1325 – Microsoft Windows Media Player 9.0 - ActiveX Control File Enumeration
https://notcve.org/view.php?id=CVE-2004-1325
The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote attackers to determine the existence of files on the local system. • https://www.exploit-db.com/exploits/25032 http://marc.info/?l=bugtraq&m=110352518211306&w=2 http://www.securityfocus.com/bid/12032 https://exchange.xforce.ibmcloud.com/vulnerabilities/18587 •
CVSS: 2.6EPSS: 2%CPEs: 1EXPL: 2CVE-2004-1324 – Microsoft Windows Media Player 9.0 - ActiveX Control Media File Attribute Corruption
https://notcve.org/view.php?id=CVE-2004-1324
The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer. • https://www.exploit-db.com/exploits/25031 http://marc.info/?l=bugtraq&m=110352518211306&w=2 http://www.securityfocus.com/bid/12031 https://exchange.xforce.ibmcloud.com/vulnerabilities/18576 •