PT-2006-7203 · Microsoft · Windows Media Player

Steven M. Christey · Publicado 2006-12-15 · Atualizado 2018-10-17 · CVE-2006-6601

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Windows Media Player version 10.00.00.4036

Description The issue allows remote attackers to cause a denial of service via a .MID (MIDI) file with a malformed header chunk without any track chunks. This could involve the number of tracks or time division fields that are set to 0.

Recommendations For Windows Media Player version 10.00.00.4036, consider avoiding the use of .MID files with malformed header chunks until a fix is available. As a temporary workaround, restrict the handling of MIDI files to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2006-6601

Produtos afetados

Windows Media Player

Referências · 7

• 🔥 https://exploit-db.com/exploits/2935 · Exploit
• 🔥 https://exploit-db.com/exploits/29285 · Exploit
• http://securityfocus.com/archive/1/454505/100/0/threaded · Nota
• http://vupen.com/english/advisories/2006/5039 · Aviso do Fabricante
• http://attrition.org/pipermail/vim/2006-December/001182.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-6601 · Nota de Segurança
• http://securityfocus.com/bid/21612 · Nota