AdPlug Buffer Overflow Vulnerability

AdPlug is an AdLib sound player library written in C++. A buffer overflow vulnerability exists in the 'Ca2mLoader::load' function of the a2m.cpp file in AdPlug version 2.3.1. The vulnerability stems from a networked system or product performing operations in memory without properly validating dat...

CVE-2019-14690

AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::bmfconvertstream in bmf.cpp...

CVE-2019-14690

AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::bmfconvertstream in bmf.cpp...

CVE-2019-14692

AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load in mkj.cpp...

CVE-2019-14691

AdPlug 2.3.1 has a heap-based buffer overflow in CdtmLoader::load in dtm.cpp...

Heap overflow

AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load in mkj.cpp...

CVE-2019-14690

AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::bmfconvertstream in bmf.cpp...

CVE-2019-14692

AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load in mkj.cpp...

CVE-2019-14692

CVE-2019-14692 affects AdPlug 2.3.1 with a heap-based buffer overflow in CmkjPlayer::load() of mkj.cpp. CVSSv3 base score 8.8 (NETWORK, LOW ATTACK COMPLEXITY, USER INTERACTION REQUIRED) with HIGH impact on confidentiality, integrity, and availability. Connected sources show mitigations in newer A...

CVE-2019-14692

AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load in mkj.cpp...

CVE-2019-14691

AdPlug 2.3.1 has a heap-based buffer overflow in CdtmLoader::load in dtm.cpp...

CVE-2019-14691

CVE-2019-14691 affects AdPlug 2.3.1 with a heap-based overflow in CdtmLoader::load() (dtm.cpp). Root cause: heap overflow in loading DTMs. Impact: potential instability or crash; no explicit exploitation details in provided docs. Mitigation: upgrade to a fixed release (e.g., AdPlug 2.3.3+ as indi...

PT-2019-13785 · Adplug Team · Adplug

Name of the Vulnerable Software and Affected Versions: AdPlug version 2.3.1 Description: The issue is a heap-based buffer overflow in the CdtmLoader::load function located in dtm.cpp. Recommendations: For AdPlug version 2.3.1, consider avoiding the use of the CdtmLoader::load function until a pat...

PT-2019-13784 · Adplug Team · Adplug

Name of the Vulnerable Software and Affected Versions: AdPlug version 2.3.1 Description: The issue is a heap-based buffer overflow in the CxadbmfPlayer:: bmf convert stream function, located in bmf.cpp. Recommendations: For AdPlug version 2.3.1, at the moment, there is no information about a newe...

OPENSUSE-SU-2019:1824-1 Security update for rmt-server

This update for rmt-server to version 2.3.1 fixes the following issues: - Fix mirroring logic when errors are encountered bsc1140492 - Refactor RMT::Mirror to download metadata/licenses in parallel - Check repo metadata GPG signatures during mirroring bsc1132690 - Add rmt-server-config subpackage...

Cross site scripting

Zammad GmbH Zammad 2.3.0 and earlier is affected by: Cross Site Scripting XSS - CWE-80. The impact is: Execute java script code on users browser. The component is: web app. The attack vector is: the victim must open a ticket. The fixed version is: 2.3.1, 2.2.2 and 2.1.3...

CVE-2019-1010304

Saleor Issue was introduced by merge commit: e1b01bad0703afd08d297ed3f1f472248312cc9c. This commit was released as part of 2.0.0 release is affected by: Incorrect Access Control. The impact is: Important. The component is: ProductVariant type in GraphQL API. The attack vector is: Unauthenticated...

CVE-2019-1010304

Saleor Issue was introduced by merge commit: e1b01bad0703afd08d297ed3f1f472248312cc9c. This commit was released as part of 2.0.0 release is affected by: Incorrect Access Control. The impact is: Important. The component is: ProductVariant type in GraphQL API. The attack vector is: Unauthenticated...

CVE-2019-11829

OS command injection vulnerability in driverssynoimportuser.php in Synology Calendar before 2.3.1-0617 allows remote attackers to execute arbitrary commands via the crafted 'X-Real-IP' header...

DEBIAN-CVE-2019-12973

In OpenJPEG 2.3.1, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616...