CVE-2006-0025

Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to execute arbitrary code via a PNG image with a large chunk size.
References
Link Resource
http://secunia.com/advisories/20626 Patch Vendor Advisory
http://securitytracker.com/id?1016284
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=406 Patch Vendor Advisory
http://www.kb.cert.org/vuls/id/608020 US Government Resource
http://www.osvdb.org/26430
http://www.securityfocus.com/bid/18385 Patch
http://www.us-cert.gov/cas/techalerts/TA06-164A.html US Government Resource
http://www.vupen.com/english/advisories/2006/2322
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-024
https://exchange.xforce.ibmcloud.com/vulnerabilities/26788
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1230
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1729
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1805
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1807
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1820
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1974
http://secunia.com/advisories/20626 Patch Vendor Advisory
http://securitytracker.com/id?1016284
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=406 Patch Vendor Advisory
http://www.kb.cert.org/vuls/id/608020 US Government Resource
http://www.osvdb.org/26430
http://www.securityfocus.com/bid/18385 Patch
http://www.us-cert.gov/cas/techalerts/TA06-164A.html US Government Resource
http://www.vupen.com/english/advisories/2006/2322
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-024
https://exchange.xforce.ibmcloud.com/vulnerabilities/26788
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1230
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1729
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1805
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1807
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1820
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1974
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microsoft:windows_media_player:9:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:windows_media_player:10:*:*:*:*:*:*:*

History

21 Nov 2024, 00:05

Type Values Removed Values Added
References () http://secunia.com/advisories/20626 - Patch, Vendor Advisory () http://secunia.com/advisories/20626 - Patch, Vendor Advisory
References () http://securitytracker.com/id?1016284 - () http://securitytracker.com/id?1016284 -
References () http://www.idefense.com/intelligence/vulnerabilities/display.php?id=406 - Patch, Vendor Advisory () http://www.idefense.com/intelligence/vulnerabilities/display.php?id=406 - Patch, Vendor Advisory
References () http://www.kb.cert.org/vuls/id/608020 - US Government Resource () http://www.kb.cert.org/vuls/id/608020 - US Government Resource
References () http://www.osvdb.org/26430 - () http://www.osvdb.org/26430 -
References () http://www.securityfocus.com/bid/18385 - Patch () http://www.securityfocus.com/bid/18385 - Patch
References () http://www.us-cert.gov/cas/techalerts/TA06-164A.html - US Government Resource () http://www.us-cert.gov/cas/techalerts/TA06-164A.html - US Government Resource
References () http://www.vupen.com/english/advisories/2006/2322 - () http://www.vupen.com/english/advisories/2006/2322 -
References () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-024 - () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-024 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/26788 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/26788 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1230 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1230 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1729 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1729 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1805 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1805 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1807 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1807 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1820 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1820 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1974 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1974 -

Information

Published : 2006-06-13 19:06

Updated : 2024-11-21 00:05


NVD link : CVE-2006-0025

Mitre link : CVE-2006-0025

CVE.ORG link : CVE-2006-0025


JSON object : View

Products Affected

microsoft

  • windows_media_player
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer