CVE-2006-0005: Microsoft Windows-Nt

High severity, CVSS 9.3. EPSS: 38.4% chance of exploitation in the next 30 days.

Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML with an EMBED element containing a long src attribute.

Affected products

• Microsoft Windows-Nt: version datacenter_server only; version xp only; version xp_tablet_pc only
• Microsoft Windows 2000: any version; affected versions not specified
• Microsoft Windows 2000 Advanced Server: any version; version sp1 only; version sp2 only; version sp3 only; version sp4 only
• Microsoft Windows 2003 Server: version datacenter_edition only; version datacenter_edition_64-bit only; version enterprise_edition only; version enterprise_edition_64-bit only; version standard only; version standard_64-bit only; …
• Microsoft Windows Server 2000: version none only; version sp1 only; version sp2 only; version sp3 only
• Microsoft Windows Server 2003: version datacenter_sp1 only; version enterprise_sp1 only; version standard_sp1 only; version web_edition_sp1 only
• Microsoft Windows XP: any version; affected versions not specified

Published 2006-02-14. Last modified 2026-06-16.