9.3
CVSSv2

CVE-2006-0006

Published: 14/02/2006 Updated: 19/10/2018
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 940
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Windows 2000 SP4 and XP SP1, and Media Player 10 on XP SP1 and SP2 allows remote malicious users to execute arbitrary code via a crafted bitmap (.BMP) file that specifies a size of 0 but contains additional data.

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft windows media player 10

microsoft windows media player 7.1

microsoft windows media player 9

microsoft windows 98

microsoft windows 98se

microsoft windows 2000

microsoft windows 2003 server r2

microsoft windows me

microsoft windows xp

Exploits

# sploit creater by redsand@blacksecurityorg # ms06-005 advisory proof of concept # heap overflow in wmfdll @ 0x0035920a # denial of service, cuz we can't get this to play nice #shamelessly stolen from CANVAS code def intel_order(i): str="" a=chr(i % 256) i=i >> 8 b=chr(i % 256) i=i >> 8 c=chr(i % 256) ...
/* * For Remote Exploration (hint): * wwwspyinstructorscom/atmaca/research/wmp_remote_pocasx */ /* * * Windows Media Player BMP Heap Overflow (MS06-005) * Bug discovered by eEye - wwweeyecom/html/research/advisories/AD20060214html * Exploit coded by ATmaCA * Web: wwwspyinstructorscom && wwwatmacasoftc ...