PT-2006-5481 · Microsoft · Windows Media Player+2

Published 2006-12-13 · Updated 2018-10-17 · CVE-2006-4702

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Windows Media Player version 6.4 Windows XP SP2 Windows Server 2003 Windows Server 2003 SP1

Description A buffer overflow issue exists in the Windows Media Format Runtime of Windows Media Player, allowing remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.

Recommendations For Windows Media Player version 6.4, update to a newer version to mitigate the risk. For Windows XP SP2, consider applying security patches or updates to address the issue. For Windows Server 2003 and Windows Server 2003 SP1, apply security patches or updates to resolve the problem. As a temporary workaround, consider restricting access to ASF files until a patch is available.

Fix

Related Identifiers

CVE-2006-4702

Affected Products

Windows Media Player

Windows Server 2003

Windows Xp

References · 8

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-078 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-4702 · Security Note
• http://securityfocus.com/archive/1/454969/100/200/threaded · Vendor Advisory
• http://securitytracker.com/id?1017372 · Note
• http://us-cert.gov/cas/techalerts/TA06-346A.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A536 · Note
• http://support.avaya.com/elmodocs2/security/ASA-2006-274.htm · Note
• http://securityfocus.com/bid/21505 · Note