CVE-2006-0005
57Vexday Risk Score
Priorize a correção. Ela exploração observada pelo VulnCheck e tem prova de conceito pública.
ssvc Actepss 39%
da publicação à arma3 dias
Publicada no NVD14 de fev.
1ª PoC+3d
VulnCheck+1537d
probabilidade de exploração
39%top 2% das CVEs
exploração observada
simVulnCheck
3 exploit(s) público(s)
Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML with an EMBED element containing a long src attribute.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 3✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/1520exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/1505exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/1504⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-006http://secunia.com/advisories/18852http://securitytracker.com/id?1015628https://exchange.xforce.ibmcloud.com/vulnerabilities/24493https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1559http://www.idefense.com/intelligence/vulnerabilities/display.php?id=393http://www.kb.cert.org/vuls/id/692060http://www.securityfocus.com/bid/16644http://www.us-cert.gov/cas/techalerts/TA06-045A.htmlhttp://www.vupen.com/english/advisories/2006/0575