| Package | Affected versions | Patched versions |
|---|---|---|
| amarok | = 1.4.9.1 |
The MagnatuneBrowser::listDownloadComplete function in magnatunebrowser/magnatunebrowser.cpp in Amarok before 1.4.10 allows local users to overwrite arbitrary files via a symlink attack on the album_info.xml temporary file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free