adplug vulnerabilities and fixes

Recent CVEs affecting adplug, with upgrade or downgrade steps. 8 tracked.

adplug has 8 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-08-18. Highest priority: CVE-2019-15151 (score 65/100).

• CVE-2019-15151 CRITICAL 9.8 DOWNGRADE MITIGATE AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h.
• CVE-2019-14734 HIGH 8.8 DOWNGRADE MITIGATE AdPlug 2.3.1 has multiple heap-based buffer overflows in CmtkLoader::load() in mtk.cpp.
• CVE-2019-14733 HIGH 8.8 DOWNGRADE MITIGATE AdPlug 2.3.1 has multiple heap-based buffer overflows in CradLoader::load() in rad.cpp.
• CVE-2019-14732 HIGH 8.8 DOWNGRADE MITIGATE AdPlug 2.3.1 has multiple heap-based buffer overflows in Ca2mLoader::load() in a2m.cpp.
• CVE-2019-14692 HIGH 8.8 DOWNGRADE MITIGATE AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load() in mkj.cpp.
• CVE-2019-14691 HIGH 8.8 DOWNGRADE MITIGATE AdPlug 2.3.1 has a heap-based buffer overflow in CdtmLoader::load() in dtm.cpp.
• CVE-2019-14690 HIGH 8.8 DOWNGRADE MITIGATE AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::__bmf_convert_stream() in bmf.cpp.
• CVE-2018-17825 CRITICAL 9.8 DOWNGRADE MITIGATE An issue was discovered in AdPlug 2.3.1

FAQ

How do I fix adplug vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is adplug being exploited right now?

None of the tracked adplug CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which adplug CVE should I patch first?

CVE-2019-15151 currently ranks highest (65/100): AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h..

RSS feed for adplug · ← Back to latest CVEs