CVE-2006-6134
Heap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Microsoft Windows...
Heap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Microsoft Windows Media Player (WMP) 10.00.00.4036 on Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long HREF attribute, using an unrecognized protocol, in a REF element in an ASX PlayList file.
Exploit likelihood
What each source reports
NVD Score used
Heap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Microsoft Windows Media Player (WMP) 10.00.00.4036 on Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long HREF attribute, using an unrecognized protocol, in a REF element in an ASX PlayList file.
- Record
CVE-2006-6134- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Microsoft Windows Media Player (WMP) 10.00.00.4036 on Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long HREF attribute, using an unrecognized protocol, in a REF element in an ASX PlayList file.
- Record
CVE-2006-6134- Updated
- 2026-11-02
EUVDEUVD-2006-6117 No score
Heap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Microsoft Windows Media Player (WMP) 10.00.00.4036 on Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long HREF attribute, using an unrecognized protocol, in a REF element in an ASX PlayList file.
- Record
EUVD-2006-6117- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r4mg-5cqc-959q No score
Heap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Microsoft Windows...
Heap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Microsoft Windows Media Player (WMP) 10.00.00.4036 on Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long HREF attribute, using an unrecognized protocol, in a REF element in an ASX PlayList file.
- Record
GHSA-r4mg-5cqc-959q- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-6134 is a high vulnerability (CVSS 7.5) in Microsoft Windows Media Player, published November 28, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 44.1%, the 98th percentile. No source names a fixed version.
References
securitytracker.com/id?1017354
support.avaya.com/elmodocs2/security/ASA-2006-274.htm
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-078
securityreason.com/securityalert/1922
kb.cert.org/vuls/id/208769
secunia.com/advisories/22971
Show 11 moreShow less
securityfocus.com/archive/1/452352/100/0/threaded
us-cert.gov/cas/techalerts/TA06-346A.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A669
research.eeye.com/html/alerts/zeroday/20061122.html
blogs.technet.com/msrc/archive/2006/12/07/public-proof-of-concept-code-for-asx-file-format-isssue.aspx
vupen.com/english/advisories/2006/4882
nvd.nist.gov/vuln/detail/CVE-2006-6134
github.com/advisories/GHSA-r4mg-5cqc-959q