Heap-Based Buffer Overflow in AdPlug Version 2.3.1
CVE-2019-14691

8.8HIGH

Key Information:

Status
Vendor
CVE Published:
6 August 2019

What is CVE-2019-14691?

A heap-based buffer overflow has been identified in AdPlug version 2.3.1, specifically within the CdtmLoader::load() method in dtm.cpp. This vulnerability could allow malicious actors to exploit memory allocation errors, potentially leading to arbitrary code execution. Users of AdPlug are advised to update to the latest versions and monitor for related patches.

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.