CVE-2004-1302: Yamt

High severity, CVSS 10.0. EPSS: 3.8% chance of exploitation in the next 30 days.

The id3tag_sort function in id3tag.c for YAMT 0.5 allows remote attackers to execute arbitrary commands via an MP3 file with double quotes in the Artist tag.

Affected products

• Yamt Yamt: version 0.5 only

Published 2005-01-10. Last modified 2026-06-16.