CVE-2006-3581

MEDIUM 5.1CVE-2006-3581 · Published 13/07/2006 · updated 16/06/2026

Package	Affected versions	Patched versions
adplug audacious_media_player_team	`≤ 2.0`	No fix yet

Description

Multiple stack-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via large (1) DTM and (2) S3M files.

References

adplug.cvs.sourceforge.net/adplug/adplug/src/dtm.cpp
aluigi.altervista.org/adv/adplugbof-adv.txt · Exploit
secunia.com/advisories/20972 · Patch
secunia.com/advisories/21238 · Vendor Advisory
secunia.com/advisories/21295 · Vendor Advisory
secunia.com/advisories/21869
security.gentoo.org/glsa/glsa-200607-13.xml
security.gentoo.org/glsa/glsa-200609-06.xml
osvdb.org/27045
osvdb.org/27046
securityfocus.com/archive/1/439432/100/100/threaded
securityfocus.com/bid/18859 · Exploit
vupen.com/english/advisories/2006/2697 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/27673
exchange.xforce.ibmcloud.com/vulnerabilities/27674

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free