PT-2006-5481 · Microsoft · Windows Media Player+2

Publicado 2006-12-13 · Atualizado 2018-10-17 · CVE-2006-4702

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Windows Media Player version 6.4 Windows XP SP2 Windows Server 2003 Windows Server 2003 SP1

Description A buffer overflow issue exists in the Windows Media Format Runtime of Windows Media Player, allowing remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.

Recommendations For Windows Media Player version 6.4, update to a newer version to mitigate the risk. For Windows XP SP2, consider applying security patches or updates to address the issue. For Windows Server 2003 and Windows Server 2003 SP1, apply security patches or updates to resolve the problem. As a temporary workaround, consider restricting access to ASF files until a patch is available.

Correção

Identificadores relacionados

CVE-2006-4702

Produtos afetados

Windows Media Player

Windows Server 2003

Windows Xp

Referências · 8

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-078 · Aviso do Fabricante
• http://securitytracker.com/id?1017372 · Nota
• http://us-cert.gov/cas/techalerts/TA06-346A.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4702 · Nota de Segurança
• http://securityfocus.com/archive/1/454969/100/200/threaded · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A536 · Nota
• http://support.avaya.com/elmodocs2/security/ASA-2006-274.htm · Nota
• http://securityfocus.com/bid/21505 · Nota