Back to search
CVE-2009-0136
Published: Jan 16, 2009
Modified: Aug 7, 2024
PUBLISHED
Description
Multiple array index errors in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via an Audible Audio (.aa) file with a crafted (1) nlen or (2) vlen Tag value, each of which can lead to an invalid pointer dereference, or the writing of a 0x00 byte to an arbitrary memory location, after an allocation failure.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
DSA-1706
vendor-advisory
x_refsource_DEBIAN
USN-739-1
vendor-advisory
x_refsource_UBUNTU
ADV-2009-0100
vdb-entry
x_refsource_VUPEN
http://websvn.kde.org/?view=rev&revision=908391
x_refsource_CONFIRM
33522
third-party-advisory
x_refsource_SECUNIA
GLSA-200903-34
vendor-advisory
x_refsource_GENTOO
http://websvn.kde.org/?view=rev&revision=908415
x_refsource_CONFIRM
FEDORA-2009-0715
vendor-advisory
x_refsource_FEDORA
SUSE-SR:2009:003
vendor-advisory
x_refsource_SUSE
33505
third-party-advisory
x_refsource_SECUNIA
MDVSA-2009:030
vendor-advisory
x_refsource_MANDRIVA
https://bugzilla.redhat.com/show_bug.cgi?id=479560
x_refsource_CONFIRM
[oss-security] 20090114 CVE Request -- amarok
mailing-list
x_refsource_MLIST
34315
third-party-advisory
x_refsource_SECUNIA
https://bugzilla.redhat.com/show_bug.cgi?id=479946
x_refsource_CONFIRM
http://trapkit.de/advisories/TKADV2009-002.txt
x_refsource_MISC
http://amarok.kde.org/en/releases/2.0.1.1
x_refsource_CONFIRM
20090111 [TKADV2009-002] Amarok Integer Overflow and Unchecked Allocation Vulnerabilities
mailing-list
x_refsource_BUGTRAQ
http://websvn.kde.org/?view=rev&revision=908401
x_refsource_CONFIRM
34407
third-party-advisory
x_refsource_SECUNIA
33640
third-party-advisory
x_refsource_SECUNIA
4915
third-party-advisory
x_refsource_SREASON
33210
vdb-entry
x_refsource_BID
http://bugs.gentoo.org/show_bug.cgi?id=254896
x_refsource_CONFIRM
1021558
vdb-entry
x_refsource_SECTRACK
33819
third-party-advisory
x_refsource_SECUNIA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now