MS06-006: Vulnerability in Windows Media Player Plug-in Could Allow Remote Code Execution (911564)

High Nessus Plugin ID 20906


Arbitrary code can be executed on the remote host through Media Player.


The remote host is running the Windows Media Player plug-in.

There is a vulnerability in the remote version of this software that could allow an attacker to execute arbitrary code on the remote host.

To exploit this flaw, an attacker would need to send a specially crafted media file with a rogue EMBED element and have a user on the affected host open it with the plug-in.


Microsoft has released a set of patches for Windows 2000, XP and 2003.

See Also

Plugin Details

Severity: High

ID: 20906

File Name: smb_nt_ms06-006.nasl

Version: $Revision: 1.27 $

Type: local

Agent: windows

Published: 2006/02/14

Modified: 2017/08/10

Dependencies: 13855, 57033

Risk Information

Risk Factor: High


Base Score: 9.3

Temporal Score: 7.7

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/o:microsoft:windows

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2006/02/14

Vulnerability Publication Date: 2006/02/14

Exploitable With

Core Impact

Reference Information

CVE: CVE-2006-0005

BID: 16644

OSVDB: 23132

CERT: 692060

MSFT: MS06-006

MSKB: 911564

CWE: 119