CVE-2006-3582: Multiple heap-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via the size specified…

PriorityP428medium5.1CVSS 2.0

AVNACHAuNCPIPAP

EPSS

5.06%

91.2th percentile

Multiple heap-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via the size specified in the package header of (1) CFF, (2) MTK, (3) DMO, and (4) U6M files.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
adplug_project	adplug	>= 0 < 2.0.1-1	2.0.1-1
adplug_project	adplug	>= 0 < 2.0.1-1	2.0.1-1
adplug_project	adplug	>= 0 < 2.0.1-1	2.0.1-1
adplug_project	adplug	>= 0 < 2.0.1-1	2.0.1-1
audacious_media_player_team	adplug	<= 2.0	—
debian	adplug	< adplug 2.0.1-1 (bookworm)	adplug 2.0.1-1 (bookworm)

CVSS provenance

nvdv2.05.1MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P

osv5.1MEDIUM

vendor_debian5.1MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.