CVE-2006-0005
highpriority · attend · 60EPSS 0.384 · 99 %ileexploit · functionalEUUSEPSS · scored 2026-10-27
Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML with an EMBED element containing a long src attribute.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
exploits (3)
Public proof-of-concept and weaponised exploit code.
- EDB-1504Microsoft Windows Media Player 9 - Plugin Overflow (MS06-006) (Metasploit)functional · exploit_db
- EDB-1505Microsoft Windows Media Player 10 - Plugin Overflow (MS06-006)functional · exploit_db
- EDB-1520Microsoft Windows Media Player - Plugin Overflow (MS06-006) (3)functional · exploit_db
affected products (26)
Products and version ranges known to be affected.
- microsoft windows 2000 advanced serverall versionsnvdUScpe:2.3:o:microsoft:windows_2000_advanced_server:*:*:*:*:*:*:*:*
- microsoft windows 2000 advanced server= sp1nvdUScpe:2.3:o:microsoft:windows_2000_advanced_server:*:*:*:*:*:*:*:*
- microsoft windows 2000 advanced server= sp2nvdUScpe:2.3:o:microsoft:windows_2000_advanced_server:*:*:*:*:*:*:*:*
- microsoft windows 2000 advanced server= sp3nvdUScpe:2.3:o:microsoft:windows_2000_advanced_server:*:*:*:*:*:*:*:*
- microsoft windows 2000 advanced server= sp4nvdUScpe:2.3:o:microsoft:windows_2000_advanced_server:*:*:*:*:*:*:*:*
- microsoft windows 2003 server= datacenter_editionnvdUScpe:2.3:o:microsoft:windows_2003_server:*:*:*:*:*:*:*:*
- microsoft windows 2003 server= datacenter_edition_64-bitnvdUScpe:2.3:o:microsoft:windows_2003_server:*:*:*:*:*:*:*:*
- microsoft windows 2003 server= enterprise_editionnvdUScpe:2.3:o:microsoft:windows_2003_server:*:*:*:*:*:*:*:*
- microsoft windows 2003 server= enterprise_edition_64-bitnvdUScpe:2.3:o:microsoft:windows_2003_server:*:*:*:*:*:*:*:*
- microsoft windows 2003 server= standard_64-bitnvdUScpe:2.3:o:microsoft:windows_2003_server:*:*:*:*:*:*:*:*
- microsoft windows 2003 server= web_editionnvdUScpe:2.3:o:microsoft:windows_2003_server:*:*:*:*:*:*:*:*
- microsoft windows server 2003= datacenter_sp1nvdUScpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*
- microsoft windows server 2003= enterprise_sp1nvdUScpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*
also known as (2)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (20)
External citations — patches, advisories, analysis.
- http://secunia.com/advisories/18852enisa_euvd
- http://securitytracker.com/id?1015628enisa_euvd
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=393enisa_euvd
- http://www.kb.cert.org/vuls/id/692060enisa_euvd
- http://www.securityfocus.com/bid/16644enisa_euvd
- http://www.us-cert.gov/cas/techalerts/TA06-045A.htmlenisa_euvd
- http://www.vupen.com/english/advisories/2006/0575enisa_euvd
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-006enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan