PatchTheCVEadplug project vulnerabilities
Recent CVEs affecting adplug project products. 8 tracked.
adplug project has 8 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-08-18. Highest priority: CVE-2019-15151 (score 65/100).
- CVE-2019-15151 CRITICAL 9.8 DOWNGRADE MITIGATE AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h.
- CVE-2019-14734 HIGH 8.8 DOWNGRADE MITIGATE AdPlug 2.3.1 has multiple heap-based buffer overflows in CmtkLoader::load() in mtk.cpp.
- CVE-2019-14733 HIGH 8.8 DOWNGRADE MITIGATE AdPlug 2.3.1 has multiple heap-based buffer overflows in CradLoader::load() in rad.cpp.
- CVE-2019-14732 HIGH 8.8 DOWNGRADE MITIGATE AdPlug 2.3.1 has multiple heap-based buffer overflows in Ca2mLoader::load() in a2m.cpp.
- CVE-2019-14692 HIGH 8.8 DOWNGRADE MITIGATE AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load() in mkj.cpp.
- CVE-2019-14691 HIGH 8.8 DOWNGRADE MITIGATE AdPlug 2.3.1 has a heap-based buffer overflow in CdtmLoader::load() in dtm.cpp.
- CVE-2019-14690 HIGH 8.8 DOWNGRADE MITIGATE AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::__bmf_convert_stream() in bmf.cpp.
- CVE-2018-17825 CRITICAL 9.8 DOWNGRADE MITIGATE An issue was discovered in AdPlug 2.3.1
FAQ
How do I fix adplug project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is adplug project being exploited right now?
None of the tracked adplug project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which adplug project CVE should I patch first?
CVE-2019-15151 currently ranks highest (65/100): AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h..