CVE-2006-6601: Microsoft Windows XP

Medium severity, CVSS 4.3. EPSS: 18.1% chance of exploitation in the next 30 days.

Windows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service via a .MID (MIDI) file with a malformed header chunk without any track chunks, possibly involving (1) number of tracks of (2) time division fields that are set to 0.

Affected products

  • Microsoft Windows XP: any version
  • Windows Media Player: version 10.00.00.4036 only

Published 2006-12-15. Last modified 2026-06-16.