Read the docs
TI-2006-00005 Aliases CVE-2006-0005GHSA-6h2j-xchg-wcx8

Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when…

Priority HIGH 67CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Code execution
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML with an EMBED element containing a long src attribute.

Why it matters now

EPSS 0.38409 98th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 45

CPEVersionsRoleVendor
cpe:2.3:o:microsoft:windows-nt:datacenter_server:*:*:*:*:*:*:*datacenter_serverVulnerableMicrosoft
cpe:2.3:o:microsoft:windows-nt:datacenter_server:sp1:*:*:*:*:*:*datacenter_server sp1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows-nt:datacenter_server:sp2:*:*:*:*:*:*datacenter_server sp2VulnerableMicrosoft
cpe:2.3:o:microsoft:windows-nt:datacenter_server:sp3:*:*:*:*:*:*datacenter_server sp3VulnerableMicrosoft
cpe:2.3:o:microsoft:windows-nt:datacenter_server:sp4:*:*:*:*:*:*datacenter_server sp4VulnerableMicrosoft
cpe:2.3:o:microsoft:windows-nt:xp:sp2:home:*:*:*:*:*xp sp2VulnerableMicrosoft
cpe:2.3:o:microsoft:windows-nt:xp_tablet_pc:*:*:*:*:*:*:*xp_tablet_pcVulnerableMicrosoft
cpe:2.3:o:microsoft:windows-nt:xp_tablet_pc:sp1:*:*:*:*:*:*xp_tablet_pc sp1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows-nt:xp_tablet_pc:sp2:*:*:*:*:*:*xp_tablet_pc sp2VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2000:*:sp1:pro:*:*:*:*:*all versionsVulnerableMicrosoft
  • cpe:2.3:o:microsoft:windows-nt:datacenter_server:*:*:*:*:*:*:* Versions datacenter_server Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows-nt:datacenter_server:sp1:*:*:*:*:*:* Versions datacenter_server sp1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows-nt:datacenter_server:sp2:*:*:*:*:*:* Versions datacenter_server sp2 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows-nt:datacenter_server:sp3:*:*:*:*:*:* Versions datacenter_server sp3 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows-nt:datacenter_server:sp4:*:*:*:*:*:* Versions datacenter_server sp4 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows-nt:xp:sp2:home:*:*:*:*:* Versions xp sp2 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows-nt:xp_tablet_pc:*:*:*:*:*:*:* Versions xp_tablet_pc Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows-nt:xp_tablet_pc:sp1:*:*:*:*:*:* Versions xp_tablet_pc sp1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows-nt:xp_tablet_pc:sp2:*:*:*:*:*:* Versions xp_tablet_pc sp2 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2000:*:sp1:pro:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
Show 35 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:microsoft:windows_2000:*:sp2:pro:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2000:*:sp3:pro:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2000:*:sp4:pro:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2000_advanced_server:*:*:*:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2000_advanced_server:sp1:*:*:*:*:*:*:*sp1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2000_advanced_server:sp2:*:*:*:*:*:*:*sp2VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2000_advanced_server:sp3:*:*:*:*:*:*:*sp3VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2000_advanced_server:sp4:*:*:*:*:*:*:*sp4VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:*:*:*:*:*:*:*datacenter_editionVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:*:*:*:*:*:*:*datacenter_edition_64-bitVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition:*:*:*:*:*:*:*enterprise_editionVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:*:*:*:*:*:*:*enterprise_edition_64-bitVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:standard:*:*:*:*:*:*:*standardVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:*standard_64-bitVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:web_edition:*:*:*:*:*:*:*web_editionVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2000:none:*:*:*:*:*:*:*noneVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2000:sp1:*:*:*:*:*:*:*sp1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2000:sp2:*:*:*:*:*:*:*sp2VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2000:sp3:*:*:*:*:*:*:*sp3VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2003:datacenter_sp1:*:*:*:*:*:*:*datacenter_sp1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2003:enterprise_sp1:*:*:*:*:*:*:*enterprise_sp1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2003:standard_sp1:*:*:*:*:*:*:*standard_sp1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2003:web_edition_sp1:*:*:*:*:*:*:*web_edition_sp1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:*:pro:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:sp1:pro:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:sp2:pro:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
  • cpe:2.3:o:microsoft:windows_2000:*:sp2:pro:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2000:*:sp3:pro:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2000:*:sp4:pro:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2000_advanced_server:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2000_advanced_server:sp1:*:*:*:*:*:*:* Versions sp1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2000_advanced_server:sp2:*:*:*:*:*:*:* Versions sp2 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2000_advanced_server:sp3:*:*:*:*:*:*:* Versions sp3 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2000_advanced_server:sp4:*:*:*:*:*:*:* Versions sp4 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:*:*:*:*:*:*:* Versions datacenter_edition Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:*:*:*:*:*:*:* Versions datacenter_edition_64-bit Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition:*:*:*:*:*:*:* Versions enterprise_edition Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:*:*:*:*:*:*:* Versions enterprise_edition_64-bit Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:standard:*:*:*:*:*:*:* Versions standard Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:* Versions standard_64-bit Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:web_edition:*:*:*:*:*:*:* Versions web_edition Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2000:none:*:*:*:*:*:*:* Versions none Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2000:sp1:*:*:*:*:*:*:* Versions sp1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2000:sp2:*:*:*:*:*:*:* Versions sp2 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2000:sp3:*:*:*:*:*:*:* Versions sp3 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2003:datacenter_sp1:*:*:*:*:*:*:* Versions datacenter_sp1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2003:enterprise_sp1:*:*:*:*:*:*:* Versions enterprise_sp1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2003:standard_sp1:*:*:*:*:*:*:* Versions standard_sp1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2003:web_edition_sp1:*:*:*:*:*:*:* Versions web_edition_sp1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:*:pro:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:sp1:pro:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:sp2:pro:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2006-0005
  2. 2026-10-03 Alias added: GHSA-6h2j-xchg-wcx8

References

Advisory 4

Other 2

  • TI-2008-02881 Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in… CVSS 2.0HIGH 9.3
  • TI-2008-01041 Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1… CVSS 2.0HIGH 9.3
  • TI-2007-05142 Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3… CVSS 2.0HIGH 9.3
  • TI-2008-02886 Buffer overflow in gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP… CVSS 2.0HIGH 9.3
  • TI-2008-01394 The Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2… CVSS 2.0HIGH 9.0
  • TI-2008-01378 Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly… CVSS 2.0HIGH 9.0
See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences