CVE-2004-1302

CVE-2004-1302 affects YAMT 0.5. The id3tag_sort function in id3tag.c does not sanitize the Artist tag in an MP3 file, allowing a remote attacker to execute arbitrary commands via the mv call. Impact is arbitrary command execution with the user’s privileges. No remediation details are provided in ...

CVE-2004-1302

The id3tagsort function in id3tag.c for YAMT 0.5 allows remote attackers to execute arbitrary commands via an MP3 file with double quotes in the Artist tag...

yamt -- arbitrary command execution vulnerability

Manigandan Radhakrishnan discovered a security vulnerability in YAMT which can lead to execution of arbitrary commands with the privileges of the user running YAMT when sorting based on MP3 tags. The problem exist in the id3tagsort routine which does not properly sanitize the artist tag from the...