Launchpad CVE tracker

CVE 2009-1440

Incomplete blacklist vulnerability in DownloadListCtrl.cpp in amule 2.2.4 allows remote attackers to conduct argument injection attacks into a command for mplayer via a crafted filename.

Related bugs and status

CVE-2009-1440 (Candidate) is related to these bugs:

Bug #382215: Update aMule to 2.2.5 ASAP (security issue fixed)

		In	Importance	Status
382215	Update aMule to 2.2.5 ASAP (security issue fixed)	amule (Ubuntu)	Medium	Fix Released
382215	Update aMule to 2.2.5 ASAP (security issue fixed)	amule (Ubuntu Jaunty)	Undecided	Fix Released
382215	Update aMule to 2.2.5 ASAP (security issue fixed)	amule (Debian)	Unknown	Fix Released

Bug #396807: Security issue allows code execution, CVE-2009-1440

		In	Importance	Status
396807	Security issue allows code execution, CVE-2009-1440	amule (Ubuntu)	High	Fix Released
396807	Security issue allows code execution, CVE-2009-1440	amule (Debian)	Unknown	Fix Released
396807	Security issue allows code execution, CVE-2009-1440	amule (Ubuntu Intrepid)	High	Fix Released
396807	Security issue allows code execution, CVE-2009-1440	amule (Ubuntu Jaunty)	High	Fix Released
396807	Security issue allows code execution, CVE-2009-1440	amule (Ubuntu Karmic)	High	Fix Released
396807	Security issue allows code execution, CVE-2009-1440	amule (Ubuntu Hardy)	High	Fix Released

Bug #431979: [security and bugfix release] amule 2.2.6

		In	Importance	Status
431979	[security and bugfix release] amule 2.2.6	amule (Ubuntu)	Medium	Fix Released
431979	[security and bugfix release] amule 2.2.6	AMule	Undecided	Invalid
431979	[security and bugfix release] amule 2.2.6	amule (Debian)	Unknown	Fix Released
431979	[security and bugfix release] amule 2.2.6	amule (Ubuntu Karmic)	Medium	Fix Released

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2009-1440

References