NVD

Id
64695  
Name
CVE-2006-6134  
Description
Heap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Microsoft Windows Media Player (WMP) 10.00.00.4036 on Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long HREF attribute, using an unrecognized protocol, in a REF element in an ASX PlayList file.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-11-27  
Modified Date
2011-10-17  
Seq
2006-6134  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
337807 64695 CVE-2006-6134 http://blogs.technet.com/msrc/archive/2006/12/07/public-proof-of-concept-code-for-asx-file-format-isssue.aspx  View
337808 64695 CVE-2006-6134 oval:org.mitre.oval:def:669  View
337809 64695 CVE-2006-6134 http://research.eeye.com/html/alerts/zeroday/20061122.html  View
337810 64695 CVE-2006-6134 1922  View
337811 64695 CVE-2006-6134 1017354  View
337812 64695 CVE-2006-6134 http://support.avaya.com/elmodocs2/security/ASA-2006-274.htm  View
337813 64695 CVE-2006-6134 VU#208769  View
337814 64695 CVE-2006-6134 MS06-078  View
337815 64695 CVE-2006-6134 20061122 Windows Media ASX PlayList File Denial Of Service Vulnerability  View
337816 64695 CVE-2006-6134 20061205 eEye"s Zero-Day Tracker Launch  View
337817 64695 CVE-2006-6134 HPSBST02180  View
337818 64695 CVE-2006-6134 21247  View
337819 64695 CVE-2006-6134 TA06-346A  View
337820 64695 CVE-2006-6134 ADV-2006-4882  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58628 JVNDB-2006-000824 Microsoft Windows Media Player の ASX ファイル処理におけるヒープオーバーフローの脆弱性 Microsoft Windows Media Player に含まれる Windows Media Format ランタイムには ASX ファイルの REF エレメント処理に不備が存在するために、特定の URL を処理するとヒープオーバーフローが発生する脆弱性が存在します。 CVE-2006-6134 22236 CVE-2006-6134 64695 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000824.html 2006-12-12 2008-07-04 View