CVE-2009-0136

Multiple array index errors in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to cause a denial of service application crash or execute arbitrary code via an Audible Audio .aa file with a crafted 1 nlen or 2 vlen Tag...

CVE-2009-0135

CVE-2009-0135 affects Amarok 1.4.10–2.0.1 via integer overflow in Audible::Tag::readTag when parsing Audible Audio (.aa) tags, triggering a heap overflow and remote code execution. Multiple connected advisories (Mandriva MDVSA-2009:030-1, openSUSE amarok-436, Ubuntu USN-739-1, SUSE/Security updat...

CVE-2009-0136

The CVE-2009-0136 issue affects Amarok 1.4.10–2.0.1 through an insecure parsing path in Audible Audio (.aa) files. Specifically, multiple array index errors in Audible::Tag::readTag (metadata/audible/audibletag.cpp) can lead to an invalid pointer dereference or writing a 0x00 byte, after an alloc...

CVE-2009-0135

Multiple integer overflows in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to execute arbitrary code via an Audible Audio .aa file with a large 1 nlen or 2 vlen Tag value, each of which triggers a heap-based buffer...

Debian DSA-1706-1 : amarok - integer overflows

Tobias Klein discovered that integer overflows in the code the Amarok media player uses to parse Audible files may lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Securi...

CVE-2009-0135: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple integer overflows in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to execute arbitrary code via an Audible Audio .aa file with a large 1 nlen or 2 vlen Tag value, each of which triggers a heap-based buffer...

[SECURITY] [DSA 1706-1] New amarok packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1706-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 15, 2009 http://www.debian.org/security/faq -...

DSA-1706-1 amarok - arbitrary code execution

Bulletin has no description...

[TKADV2009-002] Amarok Integer Overflow and Unchecked Allocation Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: Amarok Integer Overflow and Unchecked Allocation Vulnerabilities Advisory ID: TKADV2009-002 Revision: 1.0 Release Date: 2009/01/11 Last Modified: 2009/01/11 Date Reported: 2009/01/05 Author: Tobias Klein tk at trapkit.de Affected Software:...

amarok -- multiple vulnerabilities

Secunia reports: Tobias Klein has reported some vulnerabilities in Amarok, which potentially can be exploited by malicious people to compromise a user's system. Two integer overflow errors exist within the "Audible::Tag::readTag" function in src/metadata/audible/audibletag.cpp. These can be...