CVE-2006-0001

CVE-2006-0001 describes a critical stack-based buffer overflow vulnerability in Microsoft Publisher versions 2000 through 2003. This flaw allows user-assisted remote attackers to execute arbitrary code on a victim's system by crafting a malicious PUB file that triggers an overflow during font parsing. With a CVSS score of 9.3, it represents a high-severity threat due to its network-based attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its age and high EPSS/FAUCET scores, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.