CVE-2006-4702

2006-12-1301:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-4702

buffer overflow

windows media player

windows xp

server 2003

remote code execution

security vulnerability

7.8 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.651 Medium

EPSS

Percentile

97.9%

JSON

Buffer overflow in the Windows Media Format Runtime in Microsoft Windows Media Player (WMP) 6.4 and Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.

CPENameOperatorVersion
microsoft:windows_media_playermicrosoft windows media playereq6.4
microsoft:windows_2003_servermicrosoft windows 2003 servereqsp1
microsoft:windows_2003_servermicrosoft windows 2003 servereqgold
microsoft:windows_xpmicrosoft windows xpeq*

CPE	Name	Operator	Version
microsoft:windows_media_player	microsoft windows media player	eq	6.4
microsoft:windows_2003_server	microsoft windows 2003 server	eq	sp1
microsoft:windows_2003_server	microsoft windows 2003 server	eq	gold
microsoft:windows_xp	microsoft windows xp	eq	*