CVE-2006-6063

Un4seen Xmplay < 3.3.0.5 - Buffer Overflow

Title source: rule

Description

Stack-based buffer overflow in Un4seen XMPlay 3.3.0.5 and earlier allows remote attackers to execute arbitrary code via a M3U file containing a long (1) FileName, and cause a crash via a long (2) DisplayName.

Exploits (4)

exploitdb WORKING POC VERIFIED
by Metasploit · rubylocalwindows
https://www.exploit-db.com/exploits/16556
exploitdb WORKING POC VERIFIED
by Greg Linares · clocalwindows
https://www.exploit-db.com/exploits/2824
exploitdb WORKING POC VERIFIED
by Greg Linares · clocalwindows
https://www.exploit-db.com/exploits/2815
metasploit WORKING POC GOOD
rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/xmplay_asx.rb

Scores

EPSS 0.7935
EPSS Percentile 99.1%

Details

Status published
Products (1)
un4seen/xmplay < 3.3.0.5
Published Nov 22, 2006
Tracked Since Feb 18, 2026