gstreamer-plugins-base: integer overflow in gst_vorbis_tag_add_coverart()

Integer overflow in the gstvorbistagaddcoverart function gst-libs/gst/tag/gstvorbistag.c in vorbistag in gst-plugins-base aka gstreamer-plugins-base before 0.10.23 in GStreamer allows context-dependent attackers to execute arbitrary code via a crafted COVERART tag that is converted from a base64...

Mandrake Security Advisory MDVSA-2009:086 (gstreamer-plugins)

The remote host is missing an update to gstreamer-plugins announced via advisory MDVSA-2009:086. OpenVAS Vulnerability Test $Id: mdksa2009086.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:086 gstreamer-plugins Authors: Thomas Reinke Copyright:...

gstreamer-plugins-base security update

0.10.20-3.0.1 - CVE-2009-0586: integer overflow in gstvorbistagaddcoverart 488210...

Mandrake Security Advisory MDVSA-2009:086 (gstreamer-plugins)

The remote host is missing an update to gstreamer-plugins announced via advisory MDVSA-2009:086. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Ubuntu Update for gst-plugins-good0.10 vulnerability USN-611-3

Ubuntu Update for Linux kernel vulnerabilities USN-611-3 OpenVAS Vulnerability Test $Id: gbubuntuUSN6113.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for gst-plugins-good0.10 vulnerability USN-611-3 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-611-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: gstreamer-plugins-good

The remote host is missing an update to the system as announced in the referenced advisory. VID 37a365ed-1269-11de-a964-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 37a365ed-1269-11de-a964-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

FreeBSD Ports: gstreamer-plugins-good

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Ubuntu USN-736-1 (gst-plugins-good0.10)

The remote host is missing an update to gst-plugins-good0.10 announced via advisory USN-736-1. OpenVAS Vulnerability Test $Id: ubuntu7361.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7361.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-736-1...

Ubuntu USN-735-1 (gst-plugins-base0.10)

The remote host is missing an update to gst-plugins-base0.10 announced via advisory USN-735-1. OpenVAS Vulnerability Test $Id: ubuntu7351.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7351.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-735-1...

Ubuntu: Security Advisory (USN-736-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-735-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : gstreamer-plugins-good -- multiple memory overflows (37a365ed-1269-11de-a964-0030843d3802)

Secunia reports : Tobias Klein has reported some vulnerabilities in GStreamer Good Plug-ins, which can potentially be exploited by malicious people to compromise a vulnerable system. A boundary error occurs within the 'qtdemuxparsesamples' function in gst/gtdemux/qtdemux.c when performing QuickTi...

USN-736-1: GStreamer Good Plugins vulnerabilities

It was discovered that GStreamer Good Plugins did not correctly handle malformed Composition Time To Sample ctts atom data in Quicktime mov movie files. If a user were tricked into opening a crafted mov file, an attacker could execute arbitrary code with the privileges of the user invoking the...

USN-735-1: GStreamer Base Plugins vulnerability

It was discovered that the Base64 decoding functions in GStreamer Base Plugins did not properly handle large images in Vorbis file tags. If a user were tricked into opening a specially crafted Vorbis file, an attacker could possibly execute arbitrary code with user privileges...

CVE-2009-0586

Integer overflow in the gstvorbistagaddcoverart function gst-libs/gst/tag/gstvorbistag.c in vorbistag in gst-plugins-base aka gstreamer-plugins-base before 0.10.23 in GStreamer allows context-dependent attackers to execute arbitrary code via a crafted COVERART tag that is converted from a base64...

Integer overflow

Integer overflow in the gstvorbistagaddcoverart function gst-libs/gst/tag/gstvorbistag.c in vorbistag in gst-plugins-base aka gstreamer-plugins-base before 0.10.23 in GStreamer allows context-dependent attackers to execute arbitrary code via a crafted COVERART tag that is converted from a base64...

CVE-2009-0586

Integer overflow in the gstvorbistagaddcoverart function gst-libs/gst/tag/gstvorbistag.c in vorbistag in gst-plugins-base aka gstreamer-plugins-base before 0.10.23 in GStreamer allows context-dependent attackers to execute arbitrary code via a crafted COVERART tag that is converted from a base64...

CVE-2009-0586

Integer overflow in the gstvorbistagaddcoverart function gst-libs/gst/tag/gstvorbistag.c in vorbistag in gst-plugins-base aka gstreamer-plugins-base before 0.10.23 in GStreamer allows context-dependent attackers to execute arbitrary code via a crafted COVERART tag that is converted from a base64...

CVE-2009-0586

GStreamer vulnerability CVE-2009-0586 affects gst-plugins-base prior to 0.10.23. The issue is an integer overflow in the Vorbis cover art handling (gst_vorbis_tag_add_coverart) when a COVERART tag is base64-decoded, triggering a heap-based buffer overflow. This could allow arbitrary code executio...