Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple array index errors in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via an Audible Audio (.aa) file with a crafted (1) nlen or (2) vlen Tag value, each of which can lead to an invalid pointer dereference, or the writing of a 0x00 byte to an arbitrary memory location, after an allocation failure.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Amarok 程序audibletag.cpp函数Audible::Tag::readTag 多个拒绝服务和代码执行漏洞
Vulnerability Description
Amarok是Linux/Unix平台下的音乐播放器。 Amarok在解析畸形的Audible数字音频文件时存在多个整数溢出和未检查的内存分配漏洞，远程攻击者可以利用这些漏洞执行任意代码。 以下是amarok-2.0\src\metadata\audible\audibletag.cpp中有漏洞的代码段： [...] 140 bool Audible::Tag::readTag( FILE *fp, char **name, char **value) 141 { 142 quint32 nlen; 14
CVSS Information
N/A
Vulnerability Type
N/A