Heap-based Buffer Overflow in AdPlug 2.3.1 by AdPlug
CVE-2019-14733

8.8HIGH

Key Information:

Vendor

Adplug Project

Status
Adplug
Vendor
CVE Published:
7 August 2019

What is CVE-2019-14733?

AdPlug 2.3.1 contains multiple heap-based buffer overflow vulnerabilities in the CradLoader::load() function located in rad.cpp. These flaws allow attackers to exploit the memory management issues that could potentially lead to arbitrary code execution or data corruption, emphasizing the need for immediate remediation to ensure software security.

References

https://github.com/adplug/adplug/issues/89
x_refsource_MISC
https://lists.fedoraproject.org/archives/list/package-ann...
vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/package-ann...
vendor-advisoryx_refsource_FEDORA

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.