CVE-2006-6601

Name: CVE-2006-6601
Creator: NVD / NIST
Published: 2006-12-15T22:28:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 17.14%

Last modified Jun 16, 2026

CVE-2006-6601 is a vulnerability of currently unknown severity. Windows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service via a .MID (MIDI) file with a malformed header chunk without any track chunks, possibly involving (1) number of tracks of (2) time division fields that are set to 0.. EPSS estimates a 17.14% chance of exploitation in the next 30 days.

Description

Windows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service via a .MID (MIDI) file with a malformed header chunk without any track chunks, possibly involving (1) number of tracks of (2) time division fields that are set to 0.

Metrics

EPSS Probability

17.14%

96.7th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-399

Affected Software

Vendor	Product	Versions
Windows	Media Player	10.00.00.4036
Microsoft	Windows Xp	All versions

References

Timeline

Published: Dec 15, 2006
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2006-6601?

How severe is CVE-2006-6601?

Severity scoring for CVE-2006-6601 is pending analysis. The EPSS model estimates a 17.14% probability of exploitation in the next 30 days.

How do I fix CVE-2006-6601?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2006-6601?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST