CVE-2009-0386
- State
- Published
- Severity
- Not scored
- Published
- Feb 2, 2009
- Updated
- Aug 7, 2024
- Reserved
- Feb 2, 2009
Description
Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11 might allow remote attackers to execute arbitrary code via crafted Composition Time To Sample (ctts) atom data in a malformed QuickTime media .mov file.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 33405vdb-entry
- oval:org.mitre.oval:def:10306vdb-entrysignature
- 20090122 [TKADV2009-003] GStreamer Heap Overflow and Array Index out of Bounds Vulnerabilitiesmailing-list
- 34336third-party-advisory
- 33815third-party-advisory
- 35777third-party-advisory
- http://trapkit.de/advisories/TKADV2009-003.txt
- RHSA-2009:0271vendor-advisory
- GLSA-200907-11vendor-advisory
- 33650third-party-advisory
- ADV-2009-0225vdb-entry
- SUSE-SR:2009:005vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=481267
- USN-736-1vendor-advisory
- http://gstreamer.freedesktop.org/releases/gst-plugins-good/0.10.12.html
- [oss-security] 20090129 CVE Request -- (sort of urgent) gstreamer-plugins-good (repost) (more details about affected versions -- final version)mailing-list
- http://cgit.freedesktop.org/gstreamer/gst-plugins-good/commit/?id=bdc20b9baf13564d9a061343416395f8f9a92b53
- MDVSA-2009:035vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.