CVE-2006-0020

CVE-2006-0020 describes a critical vulnerability in Microsoft WMF parsing applications, including Internet Explorer 5.01 SP4 and 5.5 SP2, affecting various Windows operating systems such as Windows 2000, XP, and ME. This flaw allows attackers to cause a denial of service or potentially execute arbitrary code by crafting a malicious WMF file with a manipulated header size, possibly exploiting an integer overflow. With a CVSS score of 9.3, this vulnerability is highly severe, requiring no authentication and having high impact on confidentiality, integrity, and availability, though it necessitates user interaction (e.g., opening a malicious file). Despite its high severity and EPSS score, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.