Description
Multiple heap-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via the size specified in the package header of (1) CFF, (2) MTK, (3) DMO, and (4) U6M files.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | adplug | 2.0.1-1 | — |
| Debian 13 | adplug | 2.0.1-1 | — |
| Debian 12 | adplug | 2.0.1-1 | — |
References
- ADV-2006-2697 vdb-entry
- adplug-dmo-file-bo(27670) vdb-entry
- 21238 third-party-advisory
- 27043 vdb-entry
- 27044 vdb-entry
- adplug-u6m-file-bo(27677) vdb-entry
- 21295 third-party-advisory
- 27042 vdb-entry
- 18859 vdb-entry
- 27047 vdb-entry
- GLSA-200609-06 vendor-advisory
- 21869 third-party-advisory
- http://adplug.cvs.sourceforge.net/adplug/adplug/src/cff.cpp?r1=1.16&r2=1.17
- http://aluigi.altervista.org/adv/adplugbof-adv.txt
- GLSA-200607-13 vendor-advisory
- 20060706 Various heap and stack overflow bugs in AdPlug library 2.0 (CVS 04 Jul 2006) mailing-list
- 20972 third-party-advisory