NVD

Id
58753  
Name
CVE-2006-0006  
Description
Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Windows 2000 SP4 and XP SP1, and Media Player 10 on XP SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted bitmap (.BMP) file that specifies a size of 0 but contains additional data.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2006-02-14  
Modified Date
2017-07-10  
Seq
2006-0006  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
301410 58753 CVE-2006-0006 oval:org.mitre.oval:def:1256  View
301411 58753 CVE-2006-0006 oval:org.mitre.oval:def:1578  View
301412 58753 CVE-2006-0006 oval:org.mitre.oval:def:1598  View
301413 58753 CVE-2006-0006 oval:org.mitre.oval:def:1661  View
301414 58753 CVE-2006-0006 423  View
301415 58753 CVE-2006-0006 1015627  View
301416 58753 CVE-2006-0006 http://www.eeye.com/html/research/advisories/AD20060214.html  View
301417 58753 CVE-2006-0006 VU#291396  View
301418 58753 CVE-2006-0006 MS06-005  View
301419 58753 CVE-2006-0006 20060214 [EEYEB-20051017] Windows Media Player BMP Heap Overflow  View
301420 58753 CVE-2006-0006 20060215 Windows Media Player BMP Heap Overflow (MS06-005)  View
301421 58753 CVE-2006-0006 16633  View
301422 58753 CVE-2006-0006 TA06-045A  View
301423 58753 CVE-2006-0006 ADV-2006-0574  View
301424 58753 CVE-2006-0006 win-media-player-bmp-bo(24488)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57910 JVNDB-2006-000106 Microsoft Windows Media Player の不正なビットマップファイルの処理によるヒープオーバーフローの脆弱性 Microsoft Windows Media Player には、ビットマップ (.bmp) の画像解析において、バッファに渡す前にフィールド長の妥当性が適切に検証されないため、ヒープオーバーフローが発生する脆弱性が存在します。 CVE-2006-0006 16108 CVE-2006-0006 58753 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000106.html 2006-02-14 2007-04-01 View