Vulnerability Details CVE-2006-6601
Windows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service via a .MID (MIDI) file with a malformed header chunk without any track chunks, possibly involving (1) number of tracks of (2) time division fields that are set to 0.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.436
EPSS Ranking 97.4%
CVSS Severity
CVSS v2 Score 4.3
References
- http://www.attrition.org/pipermail/vim/2006-December/001182.html
- http://www.securityfocus.com/archive/1/454505/100/0/threaded
- http://www.securityfocus.com/bid/21612
- http://www.vupen.com/english/advisories/2006/5039
- http://www.attrition.org/pipermail/vim/2006-December/001182.html
- http://www.securityfocus.com/archive/1/454505/100/0/threaded
- http://www.securityfocus.com/bid/21612
- http://www.vupen.com/english/advisories/2006/5039
Products affected by CVE-2006-6601
-
cpe:2.3:a:windows:media_player:10.00.00.4036
-
cpe:2.3:o:microsoft:windows_xp:-
-
cpe:2.3:o:microsoft:windows_xp:sp2
-
cpe:2.3:o:microsoft:windows_xp:sp3
-
cpe:2.3:o:microsoft:windows_xp:unknown