Read the docs

Amarok

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Amarok records in CISA KEV

No Amarok vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Amarok 4 records MEDIUM Web Frontend 1 record LOW

Records

4 records in Amarok · all components

TI-2009-00125 CVE-2009-0136 · GHSA-v2j5-6pgm-rh74

Multiple array index errors in the Audible::Tag::readTag function in…

Priority MEDIUM 50

Multiple array index errors in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to cause a denial of service (application crash) or execute arbit…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06656 Published 2009-01-16 No fix listed CWE-189
TI-2009-00124 CVE-2009-0135 · GHSA-q7j2-6vxr-m6xg

Multiple integer overflows in the Audible::Tag::readTag function in…

Priority MEDIUM 50

Multiple integer overflows in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to execute arbitrary code via an Audible Audio (.aa) file with a l…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06903 Published 2009-01-16 No fix listed CWE-119
TI-2008-03541 CVE-2008-3699 · GHSA-4vwq-rgw9-5x74

The MagnatuneBrowser::listDownloadComplete function in…

Priority LOW 16

The MagnatuneBrowser::listDownloadComplete function in magnatunebrowser/magnatunebrowser.cpp in Amarok before 1.4.10 allows local users to overwrite arbitrary files via a symlink attack on the album_info.xml temporary fi…

CVSS 2.0LOW 3.3 Local No auth Interaction — EPSS 0.00353 Published 2008-08-14 No fix listed CWE-59
Open these records in search →