CVE-2006-0006

No fix known EPSS 50%

Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Windows 2000 SP4 and XP SP1, and Media Player 10 on XP SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted bitmap (.BMP) file that specifies a size of 0 but contains additional data.

Published 2006-02-14 · CVE record · OSV

Products: microsoft windows_media_player, microsoft windows_2000, microsoft windows_2003_server, microsoft windows_98, microsoft windows_98se, microsoft windows_me, microsoft windows_xp