CVE-2018-1169

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Amazon Music Player 6.1.5.1213. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of URI handlers. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5521.

• CWE-78
• CWE-20

• http://www.securityfocus.com/bid/103215Third Party Advisory, VDB Entry
• https://zerodayinitiative.com/advisories/ZDI-18-215Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/103215Third Party Advisory, VDB Entry
• https://zerodayinitiative.com/advisories/ZDI-18-215Third Party Advisory, VDB Entry

Published

Mar 2, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11684Liblouis 3.5.0 has a stack-based Buffer Overflow in the func…
• CVE-2018-11685Liblouis 3.5.0 has a stack-based Buffer Overflow in the func…
• CVE-2018-11686The Publish Service in FlexPaper (later renamed FlowPaper) 2…
• CVE-2018-11687An integer overflow in the distributeBTR function of a smart…
• CVE-2018-11688Ignite Realtime Openfire before 3.9.2 is vulnerable to cross…
• CVE-2018-11689Web Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung W…6.1
• CVE-2018-11690The Balbooa Gridbox extension version 2.4.0 and previous ver…
• CVE-2018-11691Emerson DeltaV Smart Switch Command Center application, avai…
• CVE-2018-11692An issue was discovered on Canon LBP6650, LBP3370, LBP3460, …
• CVE-2018-11693An issue was discovered in LibSass through 3.5.4. An out-of-…
• CVE-2018-11694An issue was discovered in LibSass through 3.5.4. A NULL poi…
• CVE-2018-11695An issue was discovered in LibSass <3.5.3. A NULL pointer de…