AdPlug 2.0 - Multiple Remote File Buffer Overflow Vulnerabilities

admin

0
文章

0
评论

2023-12-14 12:21:42 Ali_nvd 来源：ZONE.CI 全球网 0 阅读模式

中危 AdPlug 2.0 - Multiple Remote File Buffer Overflow Vulnerabilities

CVE编号

CVE-2006-3581

利用情况

POC 已公开

补丁情况

官方补丁

披露时间

2006-07-14

漏洞描述

Multiple stack-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via large (1) DTM and (2) S3M files.

解决建议

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
http://adplug.cvs.sourceforge.net/adplug/adplug/src/dtm.cpp?view=log
http://aluigi.altervista.org/adv/adplugbof-adv.txt
http://secunia.com/advisories/20972
http://secunia.com/advisories/21238
http://secunia.com/advisories/21295
http://secunia.com/advisories/21869
http://security.gentoo.org/glsa/glsa-200607-13.xml
http://security.gentoo.org/glsa/glsa-200609-06.xml
http://www.osvdb.org/27045
http://www.osvdb.org/27046
http://www.securityfocus.com/archive/1/439432/100/100/threaded
http://www.securityfocus.com/bid/18859
http://www.vupen.com/english/advisories/2006/2697
https://exchange.xforce.ibmcloud.com/vulnerabilities/27673
https://exchange.xforce.ibmcloud.com/vulnerabilities/27674

受影响软件情况

1
#	类型	厂商	产品	版本	影响面
	运行在以下环境
	应用	audacious_media_player_team	adplug	*		Up to (including) 2.0
	运行在以下环境
	系统	debian_10	adplug	*		Up to (excluding) 2.0.1-1
	运行在以下环境
	系统	debian_11	adplug	*		Up to (excluding) 2.0.1-1
	运行在以下环境
	系统	debian_12	adplug	*		Up to (excluding) 2.0.1-1
	运行在以下环境
	系统	debian_sid	adplug	*		Up to (excluding) 2.0.1-1