CVE-2006-6134

HIGH 7.5CVE-2006-6134 · Published 28/11/2006 · updated 16/06/2026

Package	Affected versions	Patched versions
windows media player microsoft	`= 10.00.00.4036`	No fix yet

Description

Heap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Microsoft Windows Media Player (WMP) 10.00.00.4036 on Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long HREF attribute, using an unrecognized protocol, in a REF element in an ASX PlayList file.

References

blogs.technet.com/msrc/archive/2006/12/07/public-proof-of-concept-code-for-asx-file-format-isssue.aspx
research.eeye.com/html/alerts/zeroday/20061122.html
secunia.com/advisories/22971 · Vendor Advisory
securityreason.com/securityalert/1922
securitytracker.com/id
support.avaya.com/elmodocs2/security/ASA-2006-274.htm
kb.cert.org/vuls/id/208769 · US Government Resource
securityfocus.com/archive/1/452352/100/0/threaded
securityfocus.com/archive/1/453579/100/0/threaded
securityfocus.com/archive/1/454969/100/200/threaded
securityfocus.com/bid/21247 · Exploit
us-cert.gov/cas/techalerts/TA06-346A.html · US Government Resource
vupen.com/english/advisories/2006/4882 · Vendor Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-078
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A669

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free