CVE-2006-6601

Windows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service via a .MID (MIDI) file with a malformed header chunk without any track chunks, possibly involving (1) number of tracks of (2) time division fields that are set to 0.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://www.attrition.org/pipermail/vim/2006-December/001182.html
http://www.securityfocus.com/archive/1/454505/100/0/threaded
http://www.securityfocus.com/bid/21612
http://www.vupen.com/english/advisories/2006/5039	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:windows:media_player:10.00.00.4036:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2006-12-15 22:28

Updated : 2024-02-04 17:13

NVD link : CVE-2006-6601

Mitre link : CVE-2006-6601

CVE.ORG link : CVE-2006-6601

JSON object : View

Products Affected

microsoft

windows_xp

windows

media_player

CWE

CWE-399

Resource Management Errors

{"id": "CVE-2006-6601", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2006-12-15T22:28:00.000", "references": [{"url": "http://www.attrition.org/pipermail/vim/2006-December/001182.html", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/454505/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/21612", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/5039", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-399"}]}], "descriptions": [{"lang": "en", "value": "Windows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service via a .MID (MIDI) file with a malformed header chunk without any track chunks, possibly involving (1) number of tracks of (2) time division fields that are set to 0."}, {"lang": "es", "value": "Windows Media Player 10.00.00.4036 en Microsoft Windows XP SP2 permite a atacantes remotos con la intervenci\u00f3n del usuario provocar una denegaci\u00f3n de servicio mediante un archivo .MID (MIDI) con un trozo de cabecera mal formada sin ning\u00fan trozo de pista, posiblemente afectando (1) n\u00famero de pistas (2), campos de divisi\u00f3n de tiempo establecidos a 0.\r\n"}], "lastModified": "2018-10-17T21:49:15.067", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:windows:media_player:10.00.00.4036:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D5C1CB4A-4DA3-44E1-AF72-FF33CFF1DC63"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}