CVE-2006-0005

Published: Feb 14, 2006Modified: Apr 16, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML with an EMBED element containing a long src attribute.

Affected (45)

Products: Microsoft: Windows Nt, Windows 2000, Windows 2000 Advanced Server, Windows 2003 Server, Windows Server 2000, Windows Server 2003, Windows Xp

Microsoft

7 products

Windows Nt

Windows 2000

Windows 2000 Advanced Server

Configuration A

45 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows Nt	Version datacenter_server
Microsoft Windows Nt	Version datacenter_server sp1
Microsoft Windows Nt	Version datacenter_server sp2
Microsoft Windows Nt	Version datacenter_server sp3
Microsoft Windows Nt	Version datacenter_server sp4
Microsoft Windows Nt	Version xp sp2
Microsoft Windows Nt	Version xp_tablet_pc
Microsoft Windows Nt	Version xp_tablet_pc sp1
Microsoft Windows Nt	Version xp_tablet_pc sp2
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000 Advanced Server	All versions
Microsoft Windows 2000 Advanced Server	Version sp1
Microsoft Windows 2000 Advanced Server	Version sp2
Microsoft Windows 2000 Advanced Server	Version sp3
Microsoft Windows 2000 Advanced Server	Version sp4
Microsoft Windows 2003 Server	Version datacenter_edition
Microsoft Windows 2003 Server	Version datacenter_edition_64-bit
Microsoft Windows 2003 Server	Version enterprise_edition
Microsoft Windows 2003 Server	Version enterprise_edition_64-bit
Microsoft Windows 2003 Server	Version standard
Microsoft Windows 2003 Server	Version standard_64-bit
Microsoft Windows 2003 Server	Version web_edition
Microsoft Windows Server 2000	Version none
Microsoft Windows Server 2000	Version sp1
Microsoft Windows Server 2000	Version sp2
Microsoft Windows Server 2000	Version sp3
Microsoft Windows Server 2003	Version datacenter_sp1
Microsoft Windows Server 2003	Version enterprise_sp1
Microsoft Windows Server 2003	Version standard_sp1
Microsoft Windows Server 2003	Version web_edition_sp1
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions