CVE-2006-0005

CVE-2006-0005 describes a buffer overflow vulnerability in the Microsoft Windows Media Player (WMP) 9 and 10 plug-in, affecting various Windows operating systems. This flaw allows remote attackers to execute arbitrary code when WMP is the default media handler in non-Internet Explorer browsers, by embedding a long 'src' attribute within an HTML EMBED element. With a CVSS score of 9.3, it is a critical vulnerability, indicating network-based attacks with medium complexity can lead to complete compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, exploit code is publicly available on ExploitDB, including a Metasploit module. Despite the existence of exploits, there is minimal community discussion or media coverage surrounding this CVE.