CVE-2006-6134

Exp

Heap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Microsoft Windows Media Player (WMP) 10.00.00.4036 on Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long HREF attribute, using an unrecognized protocol, in a REF element in an ASX PlayList file.

Published: 2006-11-27 Last update: 2026-06-16 Assigner: [email protected] Source: [email protected]

Conclusion & alert: CVE-2006-6134 is rated High Exploit Risk (74.5/100): CVSS High severity, with high exploitation likelihood (EPSS 41.05%, 98th percentile). Core evidence: 1 public exploit reference(s) are indexed (Exploit-DB). Mandatory action: Public exploits are available—assess exposure, apply mitigations, and prioritize patching.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Public exploit references (Exploit-DB) for CVE-2006-6134

EDB-ID Source Kind Published Link
nvd_ref exploit_tag Exploit-DB ↗

Exploit prediction scoring system (EPSS) score for CVE-2006-6134

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-06-15 73.66% 41.05% -32.62%
2 2025-12-12 69.20% 73.66% +4.46%
3 2025-07-17 69.20%

Full EPSS history (18 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2006-6134

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
7.5 2.0 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:L)
Exploitation conditions are straightforward and predictable.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:P)
Partial confidentiality impact.
Integrity impact (I:P)
Partial integrity impact.
Availability impact (A:P)
Partial availability impact.
10.0 6.4 [email protected]

Weakness enumeration for CVE-2006-6134

OS Trackers for CVE-2006-6134

vendor priority summary link
alpine CVE-2006-6134: no source package rows; 0 state rows across 0 repos (none); fixed 0, open 0. https://security.alpinelinux.org/vuln/CVE-2006-6134

Affected software / configurations for CVE-2006-6134

Vendor Product Version Raw CPE
microsoft windows_media_player 10.00.00.4036 cpe:2.3:a:microsoft:windows_media_player:10.00.00.4036:*:*:*:*:*:*:*

References for CVE-2006-6134

URL Tags
http://blogs.technet.com/msrc/archive/2006/12/07/public-proof-of-concept-code-for-asx-file-format-isssue.aspx
http://research.eeye.com/html/alerts/zeroday/20061122.html
http://secunia.com/advisories/22971 Vendor Advisory
http://securityreason.com/securityalert/1922
http://securitytracker.com/id?1017354
http://support.avaya.com/elmodocs2/security/ASA-2006-274.htm
http://www.kb.cert.org/vuls/id/208769 US Government Resource
http://www.securityfocus.com/archive/1/452352/100/0/threaded
http://www.securityfocus.com/archive/1/453579/100/0/threaded
http://www.securityfocus.com/archive/1/454969/100/200/threaded
http://www.securityfocus.com/bid/21247 Exploit
http://www.us-cert.gov/cas/techalerts/TA06-346A.html US Government Resource
http://www.vupen.com/english/advisories/2006/4882 Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-078
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A669
cvelogic Threat Intelligence