Every CVE Search/ Get API key

CVE-2006-3581

Multiple stack-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user...

5.1 MediumPublic exploitFix available

Multiple stack-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via large (1) DTM and (2) S3M files.

Exploit likelihood

13.0%Down 26.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.1

Multiple stack-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via large (1) DTM and (2) S3M files.

Record
CVE-2006-3581
CVSS 2.0
5.1 MediumAV:N/AC:H/Au:N/C:P/I:P/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Multiple stack-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via large (1) DTM and (2) S3M files.

Record
CVE-2006-3581
Updated
2026-11-02
EUVDEUVD-2006-3576 No score

Multiple stack-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via large (1) DTM and (2) S3M files.

Record
EUVD-2006-3576
Updated
2026-11-03
GitHub AdvisoriesGHSA-8x5m-9j9c-r7hr No score

Multiple stack-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user...

Multiple stack-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via large (1) DTM and (2) S3M files.

Record
GHSA-8x5m-9j9c-r7hr
Weakness
CWE-119
Updated
2026-11-02
OSV No score

Multiple stack-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via large (1) DTM and (2) S3M files.

Record
CVE-2006-3581
Updated
2026-11-02
OSVDEBIAN-CVE-2006-3581 No score

Multiple stack-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via large (1) DTM and (2) S3M files.

Record
DEBIAN-CVE-2006-3581
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
adplug
Debian:12
before 2.0.1-1
2.0.1-1
adplug
Debian:13
before 2.0.1-1
2.0.1-1
adplug
Debian:14
before 2.0.1-1
2.0.1-1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBAdPlug 2.0 - Multiple Remote File Buffer Overflow Vulnerabilities2006-07-06

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-3581 is a medium vulnerability (CVSS 5.1) in Audacious Media Player Team Adplug, published July 13, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 13.0%, the 96th percentile. Fixed in adplug 2.0.1-1.

References

Show 12 moreShow less
MoveEnter Open