This would only work if the supposed payload targeted a vulnerability in a media player. I might be wrong but I’ve never heard of one such vulnerability. And since there are so many different media players out there, such attack would not compromise as many people that other more efficient attack vectors could