Amarok vulnerabilities

2009-03-1700:00:00

ubuntu.com

7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.118 Low

EPSS

Percentile

95.3%

JSON

Releases

Ubuntu 8.10
Ubuntu 8.04
Ubuntu 7.10

Packages

amarok -

Details

It was discovered that Amarok did not correctly handle certain malformed
tags in Audible Audio (.aa) files. If a user were tricked into opening a
crafted Audible Audio file, an attacker could execute arbitrary code with
the privileges of the user invoking the program.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.10noarchamarok< 2:1.4.10-0ubuntu3.1UNKNOWN
Ubuntu8.10noarchamarok-dbg< 2:1.4.10-0ubuntu3.1UNKNOWN
Ubuntu8.10noarchamarok-engine-xine< 2:1.4.10-0ubuntu3.1UNKNOWN
Ubuntu8.10noarchamarok-engine-yauap< 2:1.4.10-0ubuntu3.1UNKNOWN
Ubuntu8.04noarchamarok< 2:1.4.9.1-0ubuntu3.2UNKNOWN
Ubuntu8.04noarchamarok-engines< 2:1.4.9.1-0ubuntu3.2UNKNOWN
Ubuntu8.04noarchamarok-xine< 2:1.4.9.1-0ubuntu3.2UNKNOWN
Ubuntu7.10noarchamarok< 2:1.4.7-0ubuntu3.2UNKNOWN
Ubuntu7.10noarchamarok-engines< 2:1.4.7-0ubuntu3.2UNKNOWN
Ubuntu7.10noarchamarok-xine< 2:1.4.7-0ubuntu3.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	8.10	noarch	amarok	< 2:1.4.10-0ubuntu3.1	UNKNOWN
Ubuntu	8.10	noarch	amarok-dbg	< 2:1.4.10-0ubuntu3.1	UNKNOWN
Ubuntu	8.10	noarch	amarok-engine-xine	< 2:1.4.10-0ubuntu3.1	UNKNOWN
Ubuntu	8.10	noarch	amarok-engine-yauap	< 2:1.4.10-0ubuntu3.1	UNKNOWN
Ubuntu	8.04	noarch	amarok	< 2:1.4.9.1-0ubuntu3.2	UNKNOWN
Ubuntu	8.04	noarch	amarok-engines	< 2:1.4.9.1-0ubuntu3.2	UNKNOWN
Ubuntu	8.04	noarch	amarok-xine	< 2:1.4.9.1-0ubuntu3.2	UNKNOWN
Ubuntu	7.10	noarch	amarok	< 2:1.4.7-0ubuntu3.2	UNKNOWN
Ubuntu	7.10	noarch	amarok-engines	< 2:1.4.7-0ubuntu3.2	UNKNOWN
Ubuntu	7.10	noarch	amarok-xine	< 2:1.4.7-0ubuntu3.2	UNKNOWN