Lucene search
+L

5827 matches found

NVD
NVD
•added 2009/02/02 7:30 p.m.•24 views

CVE-2009-0386

Heap-based buffer overflow in the qtdemuxparsesamples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins aka gst-plugins-good 0.10.9 through 0.10.11 might allow remote attackers to execute arbitrary code via crafted Composition Time To Sample ctts atom data in a malformed QuickTime medi...

9.3CVSS7.6AI score0.07147EPSS
SaveExploits1References18
NVD
NVD
•added 2009/02/02 7:30 p.m.•34 views

CVE-2009-0387

Array index error in the qtdemuxparsesamples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins aka gst-plugins-good 0.10.9 through 0.10.11 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted Sync Sample aka stss atom da...

9.3CVSS7.4AI score0.06483EPSS
SaveExploits1References18
CVE
CVE
•added 2009/02/02 7:00 p.m.•105 views

CVE-2009-0386

GStreamer Good Plug-ins 0.10.9–0.10.11 are affected by a heap-based buffer overflow in qtdemux_parse_samples() when parsing QuickTime .mov files, via crafted ctts atom data, leading to remote code execution. Remediation documented across multiple advisories: upgrade to newer versions (Red Hat RHS...

9.3CVSS7.7AI score0.07147EPSS
SaveExploits1References18Affected Software1
CVE
CVE
•added 2009/02/02 7:00 p.m.•108 views

CVE-2009-0387

Affects GStreamer Good Plugins (gst-plugins-good) versions 0.10.9–0.10.11, with the root cause in qtdemux_parse_samples() in gst/qtdemux/qtdemux.c. Remote attackers could crash the application and potentially execute code by crafting QuickTime (mov) Sync Sample (stss) atom data, related to “mark ...

9.3CVSS7.5AI score0.06483EPSS
SaveExploits1References18Affected Software2
Cvelist
Cvelist
•added 2009/02/02 7:00 p.m.•43 views

CVE-2009-0386

Heap-based buffer overflow in the qtdemuxparsesamples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins aka gst-plugins-good 0.10.9 through 0.10.11 might allow remote attackers to execute arbitrary code via crafted Composition Time To Sample ctts atom data in a malformed QuickTime medi...

7.5AI score0.07147EPSS
SaveExploits1References18
Cvelist
Cvelist
•added 2009/02/02 7:00 p.m.•42 views

CVE-2009-0387

Array index error in the qtdemuxparsesamples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins aka gst-plugins-good 0.10.9 through 0.10.11 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted Sync Sample aka stss atom da...

7.3AI score0.06483EPSS
SaveExploits1References18
Mend
Mend
•added 2009/02/02 7:00 p.m.•2 views

CVE-2009-0386

Heap-based buffer overflow in the qtdemuxparsesamples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins aka gst-plugins-good 0.10.9 through 0.10.11 might allow remote attackers to execute arbitrary code via crafted Composition Time To Sample ctts atom data in a malformed QuickTime medi...

9.3CVSS0.07147EPSS
SaveExploits1References19
Mend
Mend
•added 2009/02/02 7:00 p.m.•3 views

CVE-2009-0387

Array index error in the qtdemuxparsesamples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins aka gst-plugins-good 0.10.9 through 0.10.11 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted Sync Sample aka stss atom da...

9.3CVSS0.06483EPSS
SaveExploits1References19
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/02 12:00 a.m.•5 views

CVE-2009-0387: Improper Restriction of Operations within the Bounds of a Memory Buffer

Array index error in the qtdemuxparsesamples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins aka gst-plugins-good 0.10.9 through 0.10.11 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted Sync Sample aka stss atom da...

9.3CVSS6.5AI score0.06483EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/02 12:00 a.m.•4 views

CVE-2009-0386: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the qtdemuxparsesamples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins aka gst-plugins-good 0.10.9 through 0.10.11 might allow remote attackers to execute arbitrary code via crafted Composition Time To Sample ctts atom data in a malformed QuickTime medi...

9.3CVSS6.9AI score0.07147EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2009/02/02 12:00 a.m.•29 views

CVE-2009-0386

Heap-based buffer overflow in the qtdemuxparsesamples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins aka gst-plugins-good 0.10.9 through 0.10.11 might allow remote attackers to execute arbitrary code via crafted Composition Time To Sample ctts atom data in a malformed QuickTime medi...

9.3CVSS6.2AI score0.07147EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2009/02/02 12:00 a.m.•36 views

CVE-2009-0387

Array index error in the qtdemuxparsesamples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins aka gst-plugins-good 0.10.9 through 0.10.11 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted Sync Sample aka stss atom da...

9.3CVSS6.2AI score0.06483EPSS
SaveExploits1References2
FreeBSD
FreeBSD
•added 2009/01/22 12:00 a.m.•31 views

gstreamer-plugins-good -- multiple memory overflows

Secunia reports: Tobias Klein has reported some vulnerabilities in GStreamer Good Plug-ins, which can potentially be exploited by malicious people to compromise a vulnerable system. A boundary error occurs within the "qtdemuxparsesamples" function in gst/gtdemux/qtdemux.c when performing QuickTim...

5.1AI score
SaveExploits0References3
OpenVAS
OpenVAS
•added 2008/09/24 12:00 a.m.•38 views

Gentoo Security Advisory GLSA 200602-01 (gst-plugins-ffmpeg)

The remote host is missing updates announced in advisory GLSA 200602-01. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.5AI score0.05209EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2008/09/24 12:00 a.m.•31 views

Gentoo Security Advisory GLSA 200602-01 (gst-plugins-ffmpeg)

The remote host is missing updates announced in advisory GLSA 200602-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

7.5CVSS0.6AI score0.05209EPSS
SaveExploits0
NVD
NVD
•added 2008/07/18 4:41 p.m.•33 views

CVE-2008-3230

The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service application crash via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif...

1.9CVSS6.4AI score0.00414EPSS
SaveExploits1References7
UbuntuCve
UbuntuCve
•added 2008/07/18 4:41 p.m.•28 views

CVE-2008-3230

The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service application crash via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif...

1.9CVSS5.9AI score0.00414EPSS
SaveExploits1References1
OSV
OSV
•added 2008/07/18 4:41 p.m.•12 views

DEBIAN-CVE-2008-3230

The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service application crash via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif...

1.9CVSS6.7AI score0.00414EPSS
SaveExploits1References1
Prion
Prion
•added 2008/07/18 4:41 p.m.•19 views

Spoofing

The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service application crash via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif...

1.9CVSS6.8AI score0.00414EPSS
SaveExploits1References7
CVE
CVE
•added 2008/07/18 4:00 p.m.•95 views

CVE-2008-3230

The CVE-2008-3230 issue affects FFmpeg's lavf demuxer, where a crafted GIF can cause a denial-of-service (application crash). The vulnerability is documented in Mandriva advisories for ffmpeg, noting that updated packages fix the issue. No exploit details are provided beyond the GIF vector. Impac...

1.9CVSS6.3AI score0.00414EPSS
SaveExploits1References7Affected Software1
Rows per page
Query Builder