CVE-2018-17825 - An issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the CEmuop

CVE-2018-17825

Summary

An issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the CEmuopl class in emuopl.cpp because of a destructor's two OPLDestroy calls, each of which frees TL_TABLE, SIN_TABLE, AMS_TABLE, and VIB_TABLE.

References

Vulnerable Configurations

cpe:2.3:a:adplug_project:adplug:2.3.1:*:*:*:*:*:*:*
cpe:2.3:a:adplug_project:adplug:2.3.1:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

CVSS

Base:	7.5 (as of 07-10-2022 - 02:08)
Impact:
Exploitability:

CWE

CWE-415

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

refmap via4

fedora	FEDORA-2021-24ef21134b FEDORA-2021-64168929e4
misc	https://github.com/adplug/adplug/issues/67

Last major update

07-10-2022 - 02:08

Published

01-10-2018 - 08:29

Last modified

07-10-2022 - 02:08