CVE-2006-6250: Songbird Media Player

High severity, CVSS 7.8. EPSS: 3.3% chance of exploitation in the next 30 days.

Format string vulnerability in Songbird Media Player 0.2 and earlier allows remote attackers to cause a denial of service (crash) via an M3U Playlist file containing extended ASCII, which causes the Unicode converter to be invoked.

Affected products

• Songbird Songbird Media Player: up to and including 0.2

Published 2006-12-04. Last modified 2026-06-16.