Arbitrary Code Execution

adplug is vulnerable to arbitrary code execution. Multiple heap-based buffer overflow in CxadbmfPlayer::bmfconvertstream in bmf.cpp allows an attacker to execute arbitrary code on the host OS...