FreeBSD : gstreamer-plugins-good -- multiple memory overflows (37a365ed-1269-11de-a964-0030843d3802)

Secunia reports : Tobias Klein has reported some vulnerabilities in GStreamer Good Plug-ins, which can potentially be exploited by malicious people to compromise a vulnerable system. A boundary error occurs within the 'qtdemuxparsesamples' function in gst/gtdemux/qtdemux.c when performing QuickTi...

USN-736-1: GStreamer Good Plugins vulnerabilities

It was discovered that GStreamer Good Plugins did not correctly handle malformed Composition Time To Sample ctts atom data in Quicktime mov movie files. If a user were tricked into opening a crafted mov file, an attacker could execute arbitrary code with the privileges of the user invoking the...

USN-735-1: GStreamer Base Plugins vulnerability

It was discovered that the Base64 decoding functions in GStreamer Base Plugins did not properly handle large images in Vorbis file tags. If a user were tricked into opening a specially crafted Vorbis file, an attacker could possibly execute arbitrary code with user privileges...

CVE-2009-0586

Integer overflow in the gstvorbistagaddcoverart function gst-libs/gst/tag/gstvorbistag.c in vorbistag in gst-plugins-base aka gstreamer-plugins-base before 0.10.23 in GStreamer allows context-dependent attackers to execute arbitrary code via a crafted COVERART tag that is converted from a base64...

Integer overflow

Integer overflow in the gstvorbistagaddcoverart function gst-libs/gst/tag/gstvorbistag.c in vorbistag in gst-plugins-base aka gstreamer-plugins-base before 0.10.23 in GStreamer allows context-dependent attackers to execute arbitrary code via a crafted COVERART tag that is converted from a base64...

CVE-2009-0586

Integer overflow in the gstvorbistagaddcoverart function gst-libs/gst/tag/gstvorbistag.c in vorbistag in gst-plugins-base aka gstreamer-plugins-base before 0.10.23 in GStreamer allows context-dependent attackers to execute arbitrary code via a crafted COVERART tag that is converted from a base64...

CVE-2009-0586

Integer overflow in the gstvorbistagaddcoverart function gst-libs/gst/tag/gstvorbistag.c in vorbistag in gst-plugins-base aka gstreamer-plugins-base before 0.10.23 in GStreamer allows context-dependent attackers to execute arbitrary code via a crafted COVERART tag that is converted from a base64...

CVE-2009-0586

GStreamer vulnerability CVE-2009-0586 affects gst-plugins-base prior to 0.10.23. The issue is an integer overflow in the Vorbis cover art handling (gst_vorbis_tag_add_coverart) when a COVERART tag is base64-decoded, triggering a heap-based buffer overflow. This could allow arbitrary code executio...

CVE-2009-0586

Integer overflow in the gstvorbistagaddcoverart function gst-libs/gst/tag/gstvorbistag.c in vorbistag in gst-plugins-base aka gstreamer-plugins-base before 0.10.23 in GStreamer allows context-dependent attackers to execute arbitrary code via a crafted COVERART tag that is converted from a base64...

Debian DSA-1729-1 : gst-plugins-bad0.10 - several vulnerabilities

Several vulnerabilities have been found in gst-plugins-bad0.10, a collection of various GStreamer plugins. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0386 Tobias Klein discovered a buffer overflow in the quicktime stream demuxer qtdemux, which...

[SECURITY] [DSA 1729-1] New gst-plugins-bad0.10 packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1729-1 [email protected] http://www.debian.org/security/ Noah Meyerhans March 02, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1729-1] New gst-plugins-bad0.10 packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1729-1 [email protected] http://www.debian.org/security/ Noah Meyerhans March 02, 2009 http://www.debian.org/security/faq -...

Fedora Core 9 FEDORA-2009-1343 (gstreamer-plugins-good)

The remote host is missing an update to gstreamer-plugins-good announced via advisory FEDORA-2009-1343. OpenVAS Vulnerability Test $Id: fcore20091343.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1343 gstreamer-plugins-good Authors: Thomas Reinke...

Fedora Core 10 FEDORA-2009-1213 (gstreamer-plugins-good)

The remote host is missing an update to gstreamer-plugins-good announced via advisory FEDORA-2009-1213. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...

Fedora Core 9 FEDORA-2009-1343 (gstreamer-plugins-good)

The remote host is missing an update to gstreamer-plugins-good announced via advisory FEDORA-2009-1343. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...

SUSE: Security Summary (SUSE-SR:2009:005)

The remote host is missing updates announced in advisory SUSE-SR:2009:005. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...

Fedora 9 : gstreamer-plugins-good-0.10.8-10.fc9 (2009-1343)

Mon Feb 2 2009 - Bastien Nocera - 0.10.8-10 - Patch for overflows in the QT demuxer 481267 - Tue Aug 12 2008 Adam Jackson 0.10.8-9 - gst-plugins-good-0.10.8-http-auth.patch: Fix http auth. 457952 - Mon Jul 21 2008 Adam Jackson 0.10.8-8 - gst-plugins-good-0.10.8-v4l2-progressive-fix.patch:...

[SECURITY] Fedora 10 Update: gstreamer-plugins-good-0.10.13-1.fc10

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

[SECURITY] Fedora 9 Update: gstreamer-plugins-good-0.10.8-10.fc9

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

CentOS Security Advisory CESA-2009:0270 (gstreamer-plugins)

The remote host is missing updates to gstreamer-plugins announced in advisory CESA-2009:0270. CESA-2009:0270 63338 4 $Id: ovcesa20090270.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:0270 gstreamer-plugins Authors: Thomas Reinke Copyright: Copyright...