CVE-2008-0135

creationtimestamp| type| source ---|---|--- 2009-12-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10639...

Mandriva Security Advisory MDVSA-2009:030-1 (amarok)

The remote host is missing an update to amarok announced via advisory MDVSA-2009:030-1. OpenVAS Vulnerability Test $Id: mdksa20090301.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:030-1 amarok Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

openSUSE Security Update : amarok (amarok-436)

This update of amarok fixes several integer overflows and unchecked memory allocations that can be exploited by malformed Audible digital audio files. These bugs could be used in a user-assisted attack scenario to execute arbitrary code remotely. CVE-2009-0135, CVE-2009-0136 %NASLMINLEVEL 70300 C...

openSUSE Security Update : amarok (amarok-436)

This update of amarok fixes several integer overflows and unchecked memory allocations that can be exploited by malformed Audible digital audio files. These bugs could be used in a user-assisted attack scenario to execute arbitrary code remotely. CVE-2009-0135, CVE-2009-0136 %NASLMINLEVEL 70300 C...

ESX Service Console update for krb5

a. Service Console package krb5 updateKerberos is a network authentication protocol. It is designed toprovide strong authentication for client/server applications byusing secret-key cryptography.An input validation flaw in the asn1decodegeneraltime function inMIT Kerberos 5 before 1.6.4 allows...

VMSA-2009-0008:ESX Service Console update for krb5

VMSA-2009-0008.2 ESX Service Console update for krb5 VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0008.2 VMware Security Advisory Synopsis: ESX Service Console update for krb5 VMware Security Advisory Issue date: 2009-06-30 VMware Security Advisory Updated on: 2009-08-...

FreeBSD Ports: amarok

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

GLSA-200903-34 : Amarok: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200903-34 Amarok: User-assisted execution of arbitrary code Tobias Klein has discovered multiple vulnerabilities in Amarok: Multiple integer overflows in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp trigge...

Ubuntu USN-739-1 (amarok)

The remote host is missing an update to amarok announced via advisory USN-739-1. OpenVAS Vulnerability Test $Id: ubuntu7391.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7391.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-739-1 amarok Authors: Thomas Rein...

Ubuntu USN-735-1 (gst-plugins-base0.10)

The remote host is missing an update to gst-plugins-base0.10 announced via advisory USN-735-1. OpenVAS Vulnerability Test $Id: ubuntu7351.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7351.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-735-1...

Ubuntu USN-737-1 (libsoup)

The remote host is missing an update to libsoup announced via advisory USN-737-1. OpenVAS Vulnerability Test $Id: ubuntu7371.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7371.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-737-1 libsoup Authors: Thomas...

Mandrake Security Advisory MDVSA-2009:030 (amarok)

The remote host is missing an update to amarok announced via advisory MDVSA-2009:030. OpenVAS Vulnerability Test $Id: mdksa2009030.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:030 amarok Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

openSUSE 10 Security Update : amarok (amarok-5932)

This update of amarok fixes several integer overflows and unchecked memory allocations that can be exploited by malformed Audible digital audio files. These bugs could be used in a user-assisted attack scenario to execute arbitrary code remotely. CVE-2009-0135, CVE-2009-0136 %NASLMINLEVEL 70300 C...

Fedora Core 9 FEDORA-2009-0715 (amarok)

The remote host is missing an update to amarok announced via advisory FEDORA-2009-0715. OpenVAS Vulnerability Test $Id: fcore20090715.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-0715 amarok Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Fedora Core 9 FEDORA-2009-0715 (amarok)

The remote host is missing an update to amarok announced via advisory FEDORA-2009-0715. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Debian Security Advisory DSA 1706-1 (amarok)

The remote host is missing an update to amarok announced via advisory DSA 1706-1. OpenVAS Vulnerability Test $Id: deb17061.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1706-1 amarok Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2009-0135

Multiple integer overflows in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to execute arbitrary code via an Audible Audio .aa file with a large 1 nlen or 2 vlen Tag value, each of which triggers a heap-based buffer...

CVE-2009-0135

CVE-2009-0135 affects Amarok 1.4.10–2.0.1 via integer overflow in Audible::Tag::readTag when parsing Audible Audio (.aa) tags, triggering a heap overflow and remote code execution. Multiple connected advisories (Mandriva MDVSA-2009:030-1, openSUSE amarok-436, Ubuntu USN-739-1, SUSE/Security updat...

Debian DSA-1706-1 : amarok - integer overflows

Tobias Klein discovered that integer overflows in the code the Amarok media player uses to parse Audible files may lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Securi...

Debian: Security Advisory (DSA-1082-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...