CVE-2006-0787

CVE-2006-0787 describes a vulnerability in Plaino Wimpy MP3 Player, possibly version 5.2 and earlier, where remote attackers can insert arbitrary strings into the trackme.txt file. This is achieved by manipulating the trackFile, trackArtist, and trackTitle parameters, leading to false song information, excessive disk space consumption, and potentially storing executable code for future exploitation. The vulnerability has a CVSS score of 4.0, indicating a medium severity with network access, high attack complexity, and partial impact on integrity and availability. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an ExploitDB entry (EDB-27244) exists for a text file overwrite, and there is no significant community discussion or media coverage.