CVE-2004-1302

The id3tag_sort function in id3tag.c for YAMT 0.5 allows remote attackers to execute arbitrary...

10.0 High

The id3tag_sort function in id3tag.c for YAMT 0.5 allows remote attackers to execute arbitrary commands via an MP3 file with double quotes in the Artist tag.

Exploit likelihood

3.82%Up 2.5 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

The id3tag_sort function in id3tag.c for YAMT 0.5 allows remote attackers to execute arbitrary commands via an MP3 file with double quotes in the Artist tag.

Record: CVE-2004-1302
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

The id3tag_sort function in id3tag.c for YAMT 0.5 allows remote attackers to execute arbitrary commands via an MP3 file with double quotes in the Artist tag.

Record: CVE-2004-1302
Updated: 2026-11-02

EUVDEUVD-2004-1299 No score

The id3tag_sort function in id3tag.c for YAMT 0.5 allows remote attackers to execute arbitrary commands via an MP3 file with double quotes in the Artist tag.

Record: EUVD-2004-1299
Updated: 2026-11-03

GitHub AdvisoriesGHSA-59q6-5qj6-cxp2 No score

The id3tag_sort function in id3tag.c for YAMT 0.5 allows remote attackers to execute arbitrary...

The id3tag_sort function in id3tag.c for YAMT 0.5 allows remote attackers to execute arbitrary commands via an MP3 file with double quotes in the Artist tag.

Record: GHSA-59q6-5qj6-cxp2
Updated: 2026-11-02

Affected products

yamt

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2004-1302 is a high vulnerability (CVSS 10.0) in Yamt, published December 22, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.82%, the 90th percentile. No source names a fixed version.

Exploit likelihood

What each source reports

Affected products

History

In short

References