1.4.9.1

DATE	CVE	VULNERABILITY TITLE	RISK
2008-08-14	CVE-2008-3699	Link Following vulnerability in Amarok 1.4.9.1 The MagnatuneBrowser::listDownloadComplete function in magnatunebrowser/magnatunebrowser.cpp in Amarok before 1.4.10 allows local users to overwrite arbitrary files via a symlink attack on the album_info.xml temporary file. local amarok CWE-59	3.3

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.