CVE-2006-0025: Microsoft Windows Media Player

High severity, CVSS 9.3. EPSS: 48.7% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to execute arbitrary code via a PNG image with a large chunk size.

Affected products

• Microsoft Windows Media Player: version 9 only; version 10 only

Published 2006-06-13. Last modified 2026-06-16.