CVE-2006-0005
Microsoft Windows Media Player - Plugin Overflow (MS06-006)
Severity Score
9.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
3
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML with an EMBED element containing a long src attribute.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2005-11-09 CVE Reserved
- 2006-02-14 CVE Published
- 2006-02-17 First Exploit
- 2024-06-05 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (13)
| URL | Tag | Source |
|---|---|---|
| http://securitytracker.com/id?1015628 | Vdb Entry | |
| http://www.idefense.com/intelligence/vulnerabilities/display.php?id=393 | Third Party Advisory | |
| http://www.kb.cert.org/vuls/id/692060 | Third Party Advisory |
|
| http://www.securityfocus.com/bid/16644 | Vdb Entry | |
| http://www.us-cert.gov/cas/techalerts/TA06-045A.html | Third Party Advisory | |
| http://www.vupen.com/english/advisories/2006/0575 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/24493 | Vdb Entry | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1559 | Signature |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/1520 | 2006-02-22 | |
| https://www.exploit-db.com/exploits/1505 | 2006-02-17 | |
| https://www.exploit-db.com/exploits/1504 | 2006-02-17 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/18852 | 2019-04-30 | |
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-006 | 2019-04-30 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Microsoft Search vendor "Microsoft" | Windows-nt Search vendor "Microsoft" for product "Windows-nt" | datacenter_server Search vendor "Microsoft" for product "Windows-nt" and version "datacenter_server" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows-nt Search vendor "Microsoft" for product "Windows-nt" | datacenter_server Search vendor "Microsoft" for product "Windows-nt" and version "datacenter_server" | sp1 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows-nt Search vendor "Microsoft" for product "Windows-nt" | datacenter_server Search vendor "Microsoft" for product "Windows-nt" and version "datacenter_server" | sp2 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows-nt Search vendor "Microsoft" for product "Windows-nt" | datacenter_server Search vendor "Microsoft" for product "Windows-nt" and version "datacenter_server" | sp3 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows-nt Search vendor "Microsoft" for product "Windows-nt" | datacenter_server Search vendor "Microsoft" for product "Windows-nt" and version "datacenter_server" | sp4 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows-nt Search vendor "Microsoft" for product "Windows-nt" | xp Search vendor "Microsoft" for product "Windows-nt" and version "xp" | sp2, home |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows-nt Search vendor "Microsoft" for product "Windows-nt" | xp_tablet_pc Search vendor "Microsoft" for product "Windows-nt" and version "xp_tablet_pc" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows-nt Search vendor "Microsoft" for product "Windows-nt" | xp_tablet_pc Search vendor "Microsoft" for product "Windows-nt" and version "xp_tablet_pc" | sp1 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows-nt Search vendor "Microsoft" for product "Windows-nt" | xp_tablet_pc Search vendor "Microsoft" for product "Windows-nt" and version "xp_tablet_pc" | sp2 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | sp1, pro |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | sp2, pro |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | sp3, pro |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | sp4 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | sp4, pro |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | - | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows 2000 Advanced Server Search vendor "Microsoft" for product "Windows 2000 Advanced Server" | * | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows 2000 Advanced Server Search vendor "Microsoft" for product "Windows 2000 Advanced Server" | sp1 Search vendor "Microsoft" for product "Windows 2000 Advanced Server" and version "sp1" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows 2000 Advanced Server Search vendor "Microsoft" for product "Windows 2000 Advanced Server" | sp2 Search vendor "Microsoft" for product "Windows 2000 Advanced Server" and version "sp2" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows 2000 Advanced Server Search vendor "Microsoft" for product "Windows 2000 Advanced Server" | sp3 Search vendor "Microsoft" for product "Windows 2000 Advanced Server" and version "sp3" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows 2000 Advanced Server Search vendor "Microsoft" for product "Windows 2000 Advanced Server" | sp4 Search vendor "Microsoft" for product "Windows 2000 Advanced Server" and version "sp4" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows 2003 Server Search vendor "Microsoft" for product "Windows 2003 Server" | datacenter_edition Search vendor "Microsoft" for product "Windows 2003 Server" and version "datacenter_edition" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows 2003 Server Search vendor "Microsoft" for product "Windows 2003 Server" | datacenter_edition_64-bit Search vendor "Microsoft" for product "Windows 2003 Server" and version "datacenter_edition_64-bit" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows 2003 Server Search vendor "Microsoft" for product "Windows 2003 Server" | enterprise_edition Search vendor "Microsoft" for product "Windows 2003 Server" and version "enterprise_edition" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows 2003 Server Search vendor "Microsoft" for product "Windows 2003 Server" | enterprise_edition_64-bit Search vendor "Microsoft" for product "Windows 2003 Server" and version "enterprise_edition_64-bit" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows 2003 Server Search vendor "Microsoft" for product "Windows 2003 Server" | standard Search vendor "Microsoft" for product "Windows 2003 Server" and version "standard" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows 2003 Server Search vendor "Microsoft" for product "Windows 2003 Server" | standard_64-bit Search vendor "Microsoft" for product "Windows 2003 Server" and version "standard_64-bit" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows 2003 Server Search vendor "Microsoft" for product "Windows 2003 Server" | web_edition Search vendor "Microsoft" for product "Windows 2003 Server" and version "web_edition" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows Server 2000 Search vendor "Microsoft" for product "Windows Server 2000" | none Search vendor "Microsoft" for product "Windows Server 2000" and version "none" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows Server 2000 Search vendor "Microsoft" for product "Windows Server 2000" | sp1 Search vendor "Microsoft" for product "Windows Server 2000" and version "sp1" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows Server 2000 Search vendor "Microsoft" for product "Windows Server 2000" | sp2 Search vendor "Microsoft" for product "Windows Server 2000" and version "sp2" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows Server 2000 Search vendor "Microsoft" for product "Windows Server 2000" | sp3 Search vendor "Microsoft" for product "Windows Server 2000" and version "sp3" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows Server 2003 Search vendor "Microsoft" for product "Windows Server 2003" | datacenter_sp1 Search vendor "Microsoft" for product "Windows Server 2003" and version "datacenter_sp1" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows Server 2003 Search vendor "Microsoft" for product "Windows Server 2003" | enterprise_sp1 Search vendor "Microsoft" for product "Windows Server 2003" and version "enterprise_sp1" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows Server 2003 Search vendor "Microsoft" for product "Windows Server 2003" | standard_sp1 Search vendor "Microsoft" for product "Windows Server 2003" and version "standard_sp1" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows Server 2003 Search vendor "Microsoft" for product "Windows Server 2003" | web_edition_sp1 Search vendor "Microsoft" for product "Windows Server 2003" and version "web_edition_sp1" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | home |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | media_center |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | pro |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | x64 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | sp1, home |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | sp1, media_center |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | sp1, pro |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | sp2, media_center |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | sp2, pro |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | - | - |
Affected
| ||||||