Buffer overflow in Audacious Media Player Team Adplug

CVE-2006-3581

Multiple stack-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via large (1) DTM and (2) S3M files.

Vulnerability class: Buffer Overflow

EPSS: 0.128 (95.9th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2006-3581?
CVE-2006-3581 is a vulnerability in Audacious Media Player Team Adplug, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2006-07-13.
Is CVE-2006-3581 known to be exploited?
2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.