CVE-2006-0005: microsoft windows_2000

CVSS: 9.3v2.0HighModified

Published 14-02-2006Last modified 07-08-2024

Vulnerability summary

CVE-2006-0005 is a high (CVSS 9.3) vulnerability in microsoft windows_2000. EPSS estimates a 38.41% chance of exploitation in the next 30 days, higher than 98.5% of scored vulnerabilities. 3 public exploits are recorded.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

38.41%

0%100%

High · -0.26 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits3exploit-database

Timeline

14-02-2006
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML with an EMBED element containing a long src attribute.

CVSS metrics

1 score · 1 source · 1 version

v2.09.3

EPSS trend

Probability

38.41%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

-0.26 pp

From 38.67% on 19-09-2026

19-09-202619-10-2026

EPSS score

38.41%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

exploit-databaseremotewindowsVerified
Microsoft Windows Media Player - Plugin Overflow (MS06-006) (3)
Maturity: weaponized
exploit-databaseremotewindowsVerified
Microsoft Windows Media Player 10 - Plugin Overflow (MS06-006)
Maturity: weaponized
exploit-databaseremotewindowsVerified
Microsoft Windows Media Player 9 - Plugin Overflow (MS06-006) (Metasploit)
Maturity: weaponized

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Affected systems

Microsoft7 products

windows_2000na
windows_2000_advanced_serversp1 | sp2 | sp3 | sp4
windows_2003_serverdatacenter_edition | datacenter_edition_64-bit | enterprise_edition | enterprise_edition_64-bit | standard | standard_64-bit | web_edition
windows_server_2000none | sp1 | sp2 | sp3
windows_server_2003datacenter_sp1 | enterprise_sp1 | standard_sp1 | web_edition_sp1

Show all 7

1 vendor · 7 products

References

10 links

www.vupen.com/english/advisories/2006/0575VDB EntryX Refsource VUPEN
www.securityfocus.com/bid/16644VDB EntryX Refsource BID
exchange.xforce.ibmcloud.com/vulnerabilities/24493VDB EntryX Refsource XF
securitytracker.com/id?1015628VDB EntryX Refsource SECTRACK
www.kb.cert.org/vuls/id/692060Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.idefense.com/intelligence/vulnerabilities/display.php?id=393Third Party AdvisoryX Refsource IDEFENSE
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-006Vendor AdvisoryX Refsource MS
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1559VDB EntrySignatureX Refsource OVAL
www.us-cert.gov/cas/techalerts/TA06-045A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
secunia.com/advisories/18852Third Party AdvisoryX Refsource SECUNIAVendor Advisory

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities