Gentoo: 200703-11 Normal Severity: Amarok Remote Execution of Code

Gentoo Linux Security Advisory GLSA 200703-11 https://security.gentoo.org/ Severity: Normal Title: Amarok: User-assisted remote execution of arbitrary code Date: March 13, 2007 Bugs: #166901 ID: 200703-11

Synopsis ======= The Magnatune component shipped with Amarok is vulnerable to the injection of arbitrary shell code from a malicious Magnatune server.
Background ========= Amarok is an advanced music player.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-sound/amarok < 1.4.5-r1 >= 1.4.5-r1
========== The Magnatune downloader doesn't quote the "m_currentAlbumFileName" parameter while calling the "unzip" shell command.
Impact ===== A compromised or ...