NetSight
IP …
critical9.3Public exploit code

CVE-2006-0005

Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set as the default app…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML with an EMBED element containing a long src attribute.

Affected products

VendorProductAffected versions
MicrosoftWindows-Nt
Versions datacenter_server, xp, xp_tablet_pc
MicrosoftWindows 2000
All versions
MicrosoftWindows 2000 Advanced Server
All versions
Versions sp1, sp2, sp3, sp4
MicrosoftWindows 2003 Server
Versions datacenter_edition, datacenter_edition_64-bit, enterprise_edition, enterprise_edition_64-bit, standard, standard_64-bit
MicrosoftWindows Server 2000
Versions none, sp1, sp2, sp3
MicrosoftWindows Server 2003
Versions datacenter_sp1, enterprise_sp1, standard_sp1, web_edition_sp1
MicrosoftWindows Xp
All versions

Weakness classification

CWE-119

References