CVE-2006-0005

Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML with an EMBED element containing a long src attribute.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

38.67% chance of exploitation in the next 30 days, 98th percentile

Published

2006-02-14

Updated

2024-08-07

ExploitDB entries (3)

• https://www.exploit-db.com/exploits/1520
• https://www.exploit-db.com/exploits/1505
• https://www.exploit-db.com/exploits/1504

References

• CVE Record
• NVD entry

Related

• CVE-2006-0003
• CVE-2006-0006
• CVE-2006-0001
• CVE-2006-0015
• CVE-2006-0021
• CVE-2006-0026