CVE-2006-6134

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 44.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-11-28 · updated 2026-06-16
Weakness: CWE-119

Description

Heap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Microsoft Windows Media Player (WMP) 10.00.00.4036 on Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long HREF attribute, using an unrecognized protocol, in a REF element in an ASX PlayList file.

Affected products

Microsoft Corporation Windows Media Player: 10.00.00.4036

References

http://blogs.technet.com/msrc/archive/2006/12/07/public-proof-of-concept-code-for-asx-file-format-isssue.aspx
http://research.eeye.com/html/alerts/zeroday/20061122.html
http://secunia.com/advisories/22971
http://securityreason.com/securityalert/1922
http://securitytracker.com/id?1017354
http://support.avaya.com/elmodocs2/security/ASA-2006-274.htm
http://www.kb.cert.org/vuls/id/208769
http://www.securityfocus.com/archive/1/452352/100/0/threaded
http://www.securityfocus.com/archive/1/453579/100/0/threaded
http://www.securityfocus.com/archive/1/454969/100/200/threaded
http://www.securityfocus.com/bid/21247
http://www.us-cert.gov/cas/techalerts/TA06-346A.html

Get alerted when CVE-2006-6134 or the next vulnerability affects your stack