CVE:CVE-2006-0006
CNNVD:CNNVD-200602-197
Microsoft Windows Media Player是一款非常流行的媒体播放器。
Microsoft Windows Media Player在处理畸形的位图文件时存在漏洞，攻击者可能利用此漏洞在用户机器上执行任意指令。Windows Media Player可以播放位图格式文件(如.bmp文件)并解码bmp文件，但没有正确地处理声明大小为0的bmp文件。在这种情况下，WMP会分配大小为0的堆，但实际上会以实际文件长度拷贝数据到这个堆，因此声明大小为0的bmp文件会导致溢出。攻击者可以通过诱骗用户使用Windows Media Player打开特制的位图文件导致执行任意指令。
solution:Upgrade microsoft windows_media_player to a higher version than 7.1,9,10,and avoid the version 7.1,9,10; Upgrade microsoft windows_2000 to a higher version than *:sp1,*:sp4,and avoid the version *:sp1,*:sp4; Upgrade microsoft windows_2003_server to a higher version than r2,and avoid the version r2; Upgrade microsoft windows_98 to a higher version than *:gold,and avoid the version *:gold; Upgrade microsoft windows_98se to a higher version than *; Upgrade microsoft windows_me to a higher version than *; Upgrade microsoft windows_xp to a higher version than *:sp1,*:sp2,and avoid the version *:sp1,*:sp2