CVE-2004-1302

The id3tag_sort function in id3tag.c for YAMT 0.5 allows remote attackers to execute arbitrary commands via an MP3 file with double quotes in the Artist tag.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2005-01-10

Last modified

2024-08-08

Affected products

• Yamt (Yamt)

References

• http://rpmfind.net/linux/RPM/suse/updates/8.2/i386/rpm/i586/yamt-0.5-1277.i586.html
• http://secunia.com/advisories/13554
• http://securitytracker.com/id?1012583
• http://tigger.uic.edu/~jlongs2/holes/yamt.txt
• http://www.securityfocus.com/bid/11999
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18614