high7.8Public exploit code
CVE-2006-6250
Format string vulnerability in Songbird Media Player 0.2 and earlier allows remote attackers to cause a denial of service (crash) via an M3U Playlist file cont…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Songbird Media Player 0.2 - Format String Denial of Service (PoC)2006-11-28 · dos · windows · Verified
Impact
Format string vulnerability in Songbird Media Player 0.2 and earlier allows remote attackers to cause a denial of service (crash) via an M3U Playlist file containing extended ASCII, which causes the Unicode converter to be invoked.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Songbird | Songbird Media Player | through 0.2 |