Exploit for Windows Media Player plugin EMBED buffer overflow

CVE-2006-0005

saint · 2006-02-16

Description

Buffer overflow in Windows Media Player plugi

Entry point

Parametersrc · nested

Path/

Buffer overflow in Windows Media Player plugin via long embed src attribute in HTML served to non-IE browsers.

Affected software

Microsoft Windows-nt= datacenter_server, xp, xp_tablet_pc

Microsoft Windows 2000 All versions

Microsoft Windows 2000 Advanced Server All versions

Microsoft Windows 2003 Server= datacenter_edition, datacenter_edition_64-bit, enterprise_edition, enterprise_edition_64-bit, standard, standard_64-bit, web_edition

All known vulnerabilities by product

Internet Explorer Windows Media Player

CVSS 9.3 for CVE-2006-0005

9.3

HIGH SEVERITY

Version 2.0

VectorAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS Score

38.7%higher than 98.4% of all CVEs

Updated 2026-08-04

Exploit Details

Modified:2006-02-16 00:00

Last Seen:2025-06-26 10:09

Reporter:SAINT Corporation

Other exploits for CVE-2006-0005

wmp_plugin_ms06_006.pm.txt

2006-02-26 H D MoorePACKETSTORMPerl

Microsoft Windows Media Player - Plugin Overflow (MS06-006) (3)

2006-02-22 Matthew MurphyEXPLOITDBPerl

MS Windows Media Player 9 Plugin Overflow Expl (MS06-006) (meta)

2006-02-17 H D MooreZDTPerl

Microsoft Windows Media Player 9 - Plugin Overflow (MS06-006) (Metasploit)

2006-02-17 H D MooreEXPLOITPACKPerl

Microsoft Windows Media Player 9 - Plugin Overflow (MS06-006) (Metasploit)

2006-02-17 H D MooreEXPLOITDBPerl

Microsoft Windows Media Player 10 - Plugin Overflow (MS06-006)

2006-02-17 Matthew MurphyEXPLOITDB

Windows Media Player plugin EMBED buffer overflow

2006-02-16 SAINT CorporationSAINT

Windows Media Player plugin EMBED buffer overflow

2006-02-16 SAINT CorporationSAINT

Exploit Code

MARKDOWN31 lines

## https://sploitus.com/exploit?id=SAINT:9328EEE04FE799CF2C8D0D8EFDDE76F7
Added: 02/16/2006  
CVE: CVE-2006-0005  
BID: 16644  
OSVDB: 23132  


### Background

The Windows Media Player plug-in allows the processing of embedded media from inside other applications, such as web browsers. 

### Problem

A buffer overflow in the Windows Media Player plug-in allows remote command execution when a long EMBED tag is processed by a non-Microsoft Internet browser. 

### Resolution

Install the patch referenced in Microsoft Security Bulletin 06-006. 

### References

http://www.microsoft.com/technet/security/Bulletin/MS06-006.mspx   


### Limitations

Exploit works on Mozilla Firefox 1.5.0.1 on Windows. 

### Platforms

Windows

Exploit Code

Share

Share on social media: