CVE-2006-3582

Audacious AdPlug < 2.0 - Remote Code Execution via CFF MTK DMO U6M File Package Header

Title source: llm
STIX 2.1

Description

Multiple heap-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via the size specified in the package header of (1) CFF, (2) MTK, (3) DMO, and (4) U6M files.

References (17)

Core 17
Core References
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/2697
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/27670
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21238
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/27043
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/27044
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/27677
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21295
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/27042
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/18859
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/27047
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200609-06.xml
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21869
Exploit, Vendor Advisory x_refsource_misc
http://aluigi.altervista.org/adv/adplugbof-adv.txt
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200607-13.xml
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/439432/100/100/threaded
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/20972

Scores

EPSS 0.0506
EPSS Percentile 91.3%

Details

CWE
CWE-119
Status published
Products (1)
audacious_media_player_team/adplug < 2.0
Published Jul 13, 2006
Tracked Since Feb 18, 2026