Vulnerabilities > CVE-2006-4702 - Unspecified vulnerability in Microsoft products
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN microsoft
nessus
Summary
Buffer overflow in the Windows Media Format Runtime in Microsoft Windows Media Player (WMP) 6.4 and Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 | |
OS | 3 |
Nessus
NASL family | Windows : Microsoft Bulletins |
NASL id | SMB_NT_MS06-78.NASL |
description | The remote host is running Windows Media Player/Series. There is a vulnerability in the remote version of this software which may allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, one attacker would need to set up a rogue ASF/ASX file and send it to a victim on the remote host. |
last seen | 2020-06-01 |
modified | 2020-06-02 |
plugin id | 23838 |
published | 2006-12-12 |
reporter | This script is Copyright (C) 2006-2018 Tenable Network Security, Inc. |
source | https://www.tenable.com/plugins/nessus/23838 |
title | MS06-078: Vulnerability in Windows Media Format Could Allow Remote Code Execution (923689/925398) |
code |
|
Oval
accepted | 2015-12-22T12:30:00.000-05:00 | ||||||||||||||||||||||||||||||||
class | vulnerability | ||||||||||||||||||||||||||||||||
contributors |
| ||||||||||||||||||||||||||||||||
definition_extensions |
| ||||||||||||||||||||||||||||||||
description | Buffer overflow in the Windows Media Format Runtime in Microsoft Windows Media Player (WMP) 6.4 and Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file. | ||||||||||||||||||||||||||||||||
family | windows | ||||||||||||||||||||||||||||||||
id | oval:org.mitre.oval:def:536 | ||||||||||||||||||||||||||||||||
status | accepted | ||||||||||||||||||||||||||||||||
submitted | 2006-12-13T08:17:04 | ||||||||||||||||||||||||||||||||
title | Windows Media Format ASF Parsing Vulnerability | ||||||||||||||||||||||||||||||||
version | 75 |
Seebug
bulletinFamily | exploit |
description | Microsoft Windows是微软发布的非常流行的操作系统。 Windows的Media Format的运行时库在处理包含畸形内容的ASF及ASX文件时存在漏洞,远程攻击者可能利用此漏洞完全控制用户机器。 如果用户浏览了恶意设置的网站或被诱骗打开了包含恶意内容的电子邮件,远程攻击者可能在用户机器上执行任意指令。 Microsoft Windows Media Player 6.4 Microsoft Windows Media Format 9.5 Series Runtime x64 Edition Microsoft Windows Media Format 7.1 - 9.5 Series Runtime 临时解决方法: 如果您不能立刻安装补丁或者升级,SEBUG建议您采取以下措施以降低威胁: * 在IE中设置禁用Media Player ActiveX控件 对于ASF文件处理漏洞(CVE-2006-4702) Windows Media Player 6.4 将如下的文本保存为 .reg 文件 Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}] "Compatibility Flags"=dword:00000400 双击此 .reg 文件应用到系统。 Windows Media Player 7.1, 9 和 10 将如下的文本保存为 .reg 文件 Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{6BF52A52-394A-11D3-B153-00C04F79FAA6}] "Compatibility Flags"=dword:00000400 双击此 .reg 文件应用到系统。 对于ASX文件处理漏洞(CVE-2006-6134) Windows Media Player 9 和 10 将如下的文本保存为 .reg 文件 Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{6BF52A52-394A-11D3-B153-00C04F79FAA6}] "Compatibility Flags"=dword:00000400 双击此 .reg 文件应用到系统。 厂商补丁: Microsoft --------- Microsoft已经为此发布了一个安全公告(MS06-078)以及相应补丁: MS06-078:Microsoft Security Bulletin MS06-078 链接:<a href="http://www.microsoft.com/technet/security/Bulletin/MS06-078.mspx" target="_blank">http://www.microsoft.com/technet/security/Bulletin/MS06-078.mspx</a> |
id | SSV:898 |
last seen | 2017-11-19 |
modified | 2006-12-13 |
published | 2006-12-13 |
reporter | Root |
title | Microsoft Windows Media Format运行时库远程任意指令执行漏洞(MS06-078) |
References
- http://securitytracker.com/id?1017372
- http://securitytracker.com/id?1017372
- http://support.avaya.com/elmodocs2/security/ASA-2006-274.htm
- http://support.avaya.com/elmodocs2/security/ASA-2006-274.htm
- http://www.securityfocus.com/archive/1/454969/100/200/threaded
- http://www.securityfocus.com/archive/1/454969/100/200/threaded
- http://www.securityfocus.com/archive/1/454969/100/200/threaded
- http://www.securityfocus.com/archive/1/454969/100/200/threaded
- http://www.securityfocus.com/bid/21505
- http://www.securityfocus.com/bid/21505
- http://www.us-cert.gov/cas/techalerts/TA06-346A.html
- http://www.us-cert.gov/cas/techalerts/TA06-346A.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-078
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-078
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A536
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A536