VULNERABILITY INTELLIGENCE
CVE-2006-6979
CVSS score7.5 HIGH
EPSS probability2.39%
CISA KEVNot currently listed
Published2007-02-08
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The ruby handlers in the Magnatune component in Amarok do not properly quote text in certain contexts, probably including construction of an unzip command line, which allows attackers to execute arbitrary commands via shell metacharacters.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- cve@mitre.org
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Vendor Advisory
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory