CVE-2006-6601

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

17.97%

Published

Dec 15, 2006

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBMicrosoft Windows Media Player 6.4/10.0 - MID Malformed Header Chunk Denial of Service Exploit-DBMicrosoft Windows Media Player 9/10 - '.mid' Denial of Service

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Windows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service via a .MID (MIDI) file with a malformed header chunk without any track chunks, possibly involving (1) number of tracks of (2) time division fields that are set to 0.

Weaknesses (CWE)

CWE-399

Affected Products (2)

windows · media_playervulnerable

microsoft · windows_xpvulnerable

References (8)

http://www.attrition.org/pipermail/vim/2006-December/001182.html

http://www.securityfocus.com/archive/1/454505/100/0/threaded

http://www.securityfocus.com/bid/21612

http://www.vupen.com/english/advisories/2006/5039

Vendor Advisory

http://www.attrition.org/pipermail/vim/2006-December/001182.html