CVE-2009-0136: Multiple array index errors in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Ama...

Security readout for executives and security teams

This flaw affects Amarok’s handling of Audible Audio (.aa) metadata. A malicious audio file could crash the application and, according to the CVE description, may allow arbitrary code execution. Risk is mainly for systems where users open untrusted .aa files with affected Amarok versions. Exposure is likely limited to legacy Linux or Unix desktops still running Amarok 1.4.10 through 2.0.1, especially where .aa files are opened from email, downloads, shares, or archives. Treat as high priority only where legacy Amarok remains deployed. For modern environments without Amarok or .aa handling, business exposure is likely low. The main concern is old desktop estate risk and untrusted media-file handling. Mitigation focus: Update Amarok using the relevant distribution vendor advisory package.; Avoid opening untrusted Audible Audio .aa files on affected systems.; Remove or disable vulnerable Amarok installations where updates are unavailable..

Prepared

Jun 28, 2026, 11:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.