CVE-2009-0135

CVE-2009-0135 describes multiple integer overflow vulnerabilities in the Audible::Tag::readTag function within Amarok versions 1.4.10 through 2.0.1. These flaws allow remote attackers to execute arbitrary code by crafting malicious Audible Audio (.aa) files with large nlen or vlen Tag values, leading to heap-based buffer overflows. With a CVSS score of 9.3, this vulnerability is critical, requiring no authentication and moderate attack complexity, but potentially granting full confidentiality, integrity, and availability compromise. Despite its high severity, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.