PatchTheCVEmusicmatch vulnerabilities
Recent CVEs affecting musicmatch products. 4 tracked.
musicmatch has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2005-05-02. Highest priority: CVE-2005-1186 (score 40/100).
- CVE-2005-1186 MEDIUM 6.8 UPGRADE Musicmatch Jukebox 10.00.2047 and earlier adds the musicmatch.com domain to the Trusted Sites zone in Internet
- CVE-2005-1185 MEDIUM 4.6 UPGRADE Unquoted Windows search path vulnerability in Musicmatch Jukebox 10.00.2047 and earlier allows local users to
- CVE-2005-1168 MEDIUM 5.0 UPGRADE DiagCollectionControl.dll in Musicmatch 10.00.2047 and earlier allows remote attackers to overwrite arbitrary
- CVE-2005-1167 LOW 2.1 UPGRADE Musicmatch 10.00.2047 and earlier store log files in the Program Files directory instead of the user profile,
FAQ
How do I fix musicmatch vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is musicmatch being exploited right now?
None of the tracked musicmatch CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which musicmatch CVE should I patch first?
CVE-2005-1186 currently ranks highest (40/100): Musicmatch Jukebox 10.00.2047 and earlier adds the musicmatch.com domain to the Trusted Sites zone in Internet.