Ubuntu
unity-scope-gmusicbrowser package

  1. Bug #1483037
  2. Comment #6

Comment 6 for bug 1483037

Revision history for this message
Bernd Dietzel (l-ubuntuone1104) wrote :

If the shell command can be injected seems only depend on how the Musikplayers store their data.

The Gmusicbrowser Unity Scope seems to be lucky because the gmusicbrowser player changes special chars in the name before it stores it in his database.

The Audacious Scope and Clementine Scope are not so lucky.

I attached a screenshot where you can see the differences.