CVE-2009-1932

CVE-2009-1932 affects the GStreamer Good Plug-ins library (gst-plugins-good, 0.10.x). The vulnerability is an integer overflow in the PNG decoding path (gstpngdec.c), specifically in the user_info_callback, user_endrow_callback, and gst_pngdec_task functions, which can trigger a buffer overflow. ...

CVE-2009-1932

Multiple integer overflows in the 1 userinfocallback, 2 userendrowcallback, and 3 gstpngdectask functions ext/libpng/gstpngdec.c in GStreamer Good Plug-ins aka gst-plugins-good or gstreamer-plugins-good 0.10.15 allow remote attackers to cause a denial of service and possibly execute arbitrary cod...

GStreamer gst-plugins-good插件PNG图形处理整数溢出漏洞

BUGTRAQ ID: 35172 GStreamer是GNOME桌面环境下用来创建流媒体应用的多媒体框架。 GStreamer gst-plugins-good插件的ext/libpng/gstpngdec.c文件中存在可最终导致堆溢出的整数溢出漏洞。如果用户受骗打开了畸形的或过大的PNG文件的话，在计算输出缓冲区大小时就可能触发这个溢出，导致拒绝服务或执行任意指令。 GStreamer gst-plugins-good 0.10.15 GStreamer gst-plugins-good 0.10.12 GStreamer gst-plugins-good 0.10.11 厂商补丁：...

Integer overflow

Integer overflow in the CSoundFile::ReadMed function src/loadmed.cpp in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted 1 song comment or 2 song name, which triggers a...

CVE-2009-1438

Integer overflow in the CSoundFile::ReadMed function src/loadmed.cpp in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted 1 song comment or 2 song name, which triggers a...

DEBIAN-CVE-2009-1438

Integer overflow in the CSoundFile::ReadMed function src/loadmed.cpp in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted 1 song comment or 2 song name, which triggers a...

CVE-2009-1438

Integer overflow in the CSoundFile::ReadMed function src/loadmed.cpp in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted 1 song comment or 2 song name, which triggers a...

CVE-2009-1438

Integer overflow in the CSoundFile::ReadMed function src/loadmed.cpp in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted 1 song comment or 2 song name, which triggers a...

CVE-2009-1438

Integer overflow in the CSoundFile::ReadMed function src/loadmed.cpp in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted 1 song comment or 2 song name, which triggers a...

MDVA-2008:153 : phonon

In Mandriva Linux 2009.0, phonon's signal availableAudioCaptureDevicesChanged was not connected, causing the KDE4 desktop to be unable to play OGG files. This update corrects the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

Ubuntu 8.10 : gst-plugins-base0.10 vulnerability (USN-735-1)

It was discovered that the Base64 decoding functions in GStreamer Base Plugins did not properly handle large images in Vorbis file tags. If a user were tricked into opening a specially crafted Vorbis file, an attacker could possibly execute arbitrary code with user privileges. Note that Tenable...

Mandriva Linux Security Advisory : gstreamer-plugins-good (MDVSA-2008:092)

A vulnerability in the Speex library was found where it did not properly validate input values read from the Speex files headers. An attacker could create a malicious Speex file that would crash an application or potentially allow the execution of arbitrary code with the privileges of the...

Ubuntu 7.10 / 8.04 LTS / 8.10 : gst-plugins-good0.10 vulnerabilities (USN-736-1)

It was discovered that GStreamer Good Plugins did not correctly handle malformed Composition Time To Sample ctts atom data in Quicktime mov movie files. If a user were tricked into opening a crafted mov file, an attacker could execute arbitrary code with the privileges of the user invoking the...

Fedora 10 : gstreamer-plugins-good-0.10.13-1.fc10 (2009-1213)

Mon Jan 26 2009 - Bastien Nocera - 0.10.13-1 - Update to 0.10.13 - Update libv4l patch - Wed Jan 14 2009 Warren Togami 0.10.11-4 - Bug 477877 Fix multilib conflict in -devel - Bug 478449 Fix ladspa on lib64 - Wed Jan 14 2009 Lennart Poettering 0.10.11-3 - Bug 470000 Fix thread/memleak due to...

CentOS Security Advisory CESA-2009:0352 (gstreamer-plugins-base)

The remote host is missing updates to gstreamer-plugins-base announced in advisory CESA-2009:0352. CESA-2009:0352 63821 2 $Id: ovcesa20090352.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:0352 gstreamer-plugins-base Authors: Thomas Reinke Copyright:...

RedHat Security Advisory RHSA-2009:0352

The remote host is missing updates announced in advisory RHSA-2009:0352. GStreamer is a streaming media framework based on graphs of filters which operate on media data. GStreamer Base Plug-ins is a collection of well-maintained base plug-ins. An integer overflow flaw which caused a heap-based...

RedHat Security Advisory RHSA-2009:0352

The remote host is missing updates announced in advisory RHSA-2009:0352. GStreamer is a streaming media framework based on graphs of filters which operate on media data. GStreamer Base Plug-ins is a collection of well-maintained base plug-ins. An integer overflow flaw which caused a heap-based...

CentOS Security Advisory CESA-2009:0352 (gstreamer-plugins-base)

The remote host is missing updates to gstreamer-plugins-base announced in advisory CESA-2009:0352. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Mandriva Update for gstreamer-plugins-good MDVSA-2008:092 (gstreamer-plugins-good)

Check for the Version of gstreamer-plugins-good OpenVAS Vulnerability Test Mandriva Update for gstreamer-plugins-good MDVSA-2008:092 gstreamer-plugins-good Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software;...

Mandriva Update for gstreamer-plugins-good MDVSA-2008:092 (gstreamer-plugins-good)

Check for the Version of gstreamer-plugins-good OpenVAS Vulnerability Test Mandriva Update for gstreamer-plugins-good MDVSA-2008:092 gstreamer-plugins-good Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software;...