CVE-2006-0025
Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to...
Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to execute arbitrary code via a PNG image with a large chunk size.
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to execute arbitrary code via a PNG image with a large chunk size.
- Record
CVE-2006-0025- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to execute arbitrary code via a PNG image with a large chunk size.
- Record
CVE-2006-0025- Updated
- 2026-11-02
EUVDEUVD-2006-0033 No score
Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to execute arbitrary code via a PNG image with a large chunk size.
- Record
EUVD-2006-0033- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xg7m-r4cx-cq66 No score
Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to...
Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to execute arbitrary code via a PNG image with a large chunk size.
- Record
GHSA-xg7m-r4cx-cq66- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-0025 is a high vulnerability (CVSS 9.3) in Microsoft Windows Media Player, published June 13, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 48.7%, the 98th percentile. No source names a fixed version.
References
secunia.com/advisories/20626
exchange.xforce.ibmcloud.com/vulnerabilities/26788
us-cert.gov/cas/techalerts/TA06-164A.html
idefense.com/intelligence/vulnerabilities/display.php?id=406
securitytracker.com/id?1016284
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1807
Show 12 moreShow less
osvdb.org/26430
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-024
kb.cert.org/vuls/id/608020
vupen.com/english/advisories/2006/2322
securityfocus.com/bid/18385
nvd.nist.gov/vuln/detail/CVE-2006-0025
github.com/advisories/GHSA-xg7m-r4cx-cq66