Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Amarok Component: Amarok Clear all filters
TI-2009-00125 CVE-2009-0136 · GHSA-v2j5-6pgm-rh74

Multiple array index errors in the Audible::Tag::readTag function in…

Priority MEDIUM 50

Multiple array index errors in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to cause a denial of service (application crash) or execute arbit…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06656 Published 2009-01-16 No fix listed CWE-189
TI-2009-00124 CVE-2009-0135 · GHSA-q7j2-6vxr-m6xg

Multiple integer overflows in the Audible::Tag::readTag function in…

Priority MEDIUM 50

Multiple integer overflows in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to execute arbitrary code via an Audible Audio (.aa) file with a l…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06903 Published 2009-01-16 No fix listed CWE-119
TI-2008-03541 CVE-2008-3699 · GHSA-4vwq-rgw9-5x74

The MagnatuneBrowser::listDownloadComplete function in…

Priority LOW 16

The MagnatuneBrowser::listDownloadComplete function in magnatunebrowser/magnatunebrowser.cpp in Amarok before 1.4.10 allows local users to overwrite arbitrary files via a symlink attack on the album_info.xml temporary fi…

CVSS 2.0LOW 3.3 Local No auth Interaction — EPSS 0.00353 Published 2008-08-14 No fix listed CWE-59