--- title: 'USN-739-1: Amarok vulnerabilities | Ubuntu security notices' description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/notices/USN-739-1 --- 1. [Ubuntu Security Notices](https://ubuntu.com/security/notices) 2. USN-739-1 --- # USN-739-1: Amarok vulnerabilities Publication date 17 March 2009 Overview Amarok vulnerabilities Releases [8.10](https://ubuntu.com/security/notices?release=intrepid) [8.04](https://ubuntu.com/security/notices?release=hardy) [7.10](https://ubuntu.com/security/notices?release=gutsy) --- Open side navigation ## Packages * [amarok](https://ubuntu.com/security/cves?package=amarok) - ## Details It was discovered that Amarok did not correctly handle certain malformed tags in Audible Audio (.aa) files. If a user were tricked into opening a crafted Audible Audio file, an attacker could execute arbitrary code with the privileges of the user invoking the program. ## Update instructions In general, a standard system upgrade is sufficient to effect the necessary changes. [Learn more about how to get the fixes.](https://ubuntu.com/security/cves/about#security) The problem can be corrected by updating your system to the following package versions: | Ubuntu Release | Package Version | | --- | --- | | 8.10 intrepid | [amarok](https://launchpad.net/ubuntu/+source/amarok) –  [2:1.4.10-0ubuntu3.1](https://launchpad.net/ubuntu/+source/amarok/2:1.4.10-0ubuntu3.1) | | | | 8.04 hardy | [amarok](https://launchpad.net/ubuntu/+source/amarok) –  [2:1.4.9.1-0ubuntu3.2](https://launchpad.net/ubuntu/+source/amarok/2:1.4.9.1-0ubuntu3.2) | | | | 7.10 gutsy | [amarok](https://launchpad.net/ubuntu/+source/amarok) –  [2:1.4.7-0ubuntu3.2](https://launchpad.net/ubuntu/+source/amarok/2:1.4.7-0ubuntu3.2) | | | --- ### Reduce your security exposure Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines. [Get Ubuntu Pro](https://ubuntu.com/pro) ## References * [CVE-2009-0136](https://ubuntu.com/security/CVE-2009-0136) * [CVE-2009-0135](https://ubuntu.com/security/CVE-2009-0135)