CVE-2006-6601

Windows Media Player 10.00.00.4036 - DoS

Title source: llm

Description

Windows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service via a .MID (MIDI) file with a malformed header chunk without any track chunks, possibly involving (1) number of tracks of (2) time division fields that are set to 0.

Exploits (2)

exploitdb WORKING POC VERIFIED

by sehato · bashdoswindows

https://www.exploit-db.com/exploits/2935

View Code ZIP pw:eip

exploitdb WRITEUP VERIFIED

by shinnai · textdoswindows

https://www.exploit-db.com/exploits/29285

View Code ZIP pw:eip

References (4)

[Third Party Advisory] http://www.attrition.org/pipermail/vim/2006-December/001182.html

[Vendor Advisory] http://www.vupen.com/english/advisories/2006/5039

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/454505/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/21612

Scores

EPSS 0.4306

EPSS Percentile 97.5%

Details

CWE

CWE-399

Status published

Products (2)

microsoft/windows_xp

windows/media_player 10.00.00.4036

Published Dec 15, 2006

Tracked Since Feb 18, 2026