PatchTheCVEjukebox vulnerabilities and fixes
Recent CVEs affecting jukebox, with upgrade or downgrade steps. 4 tracked.
jukebox has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2005-05-02. Highest priority: CVE-2005-1186 (score 40/100).
- CVE-2005-1186 MEDIUM 6.8 UPGRADE Musicmatch Jukebox 10.00.2047 and earlier adds the musicmatch.com domain to the Trusted Sites zone in Internet
- CVE-2005-1185 MEDIUM 4.6 UPGRADE Unquoted Windows search path vulnerability in Musicmatch Jukebox 10.00.2047 and earlier allows local users to
- CVE-2005-1168 MEDIUM 5.0 UPGRADE DiagCollectionControl.dll in Musicmatch 10.00.2047 and earlier allows remote attackers to overwrite arbitrary
- CVE-2005-1167 LOW 2.1 UPGRADE Musicmatch 10.00.2047 and earlier store log files in the Program Files directory instead of the user profile,
FAQ
How do I fix jukebox vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jukebox being exploited right now?
None of the tracked jukebox CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jukebox CVE should I patch first?
CVE-2005-1186 currently ranks highest (40/100): Musicmatch Jukebox 10.00.2047 and earlier adds the musicmatch.com domain to the Trusted Sites zone in Internet.