FreeBSD : gstreamer-plugins-good -- multiple memory overflows (37a365ed-1269-11de-a964-0030843d3802)

Secunia reports : Tobias Klein has reported some vulnerabilities in GStreamer Good Plug-ins, which can potentially be exploited by malicious people to compromise a vulnerable system. A boundary error occurs within the 'qtdemuxparsesamples' function in gst/gtdemux/qtdemux.c when performing QuickTi...

USN-736-1: GStreamer Good Plugins vulnerabilities

It was discovered that GStreamer Good Plugins did not correctly handle malformed Composition Time To Sample ctts atom data in Quicktime mov movie files. If a user were tricked into opening a crafted mov file, an attacker could execute arbitrary code with the privileges of the user invoking the...

Debian: Security Advisory (DSA-1729-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1729-1 : gst-plugins-bad0.10 - several vulnerabilities

Several vulnerabilities have been found in gst-plugins-bad0.10, a collection of various GStreamer plugins. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0386 Tobias Klein discovered a buffer overflow in the quicktime stream demuxer qtdemux, which...

[SECURITY] [DSA 1729-1] New gst-plugins-bad0.10 packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1729-1 [email protected] http://www.debian.org/security/ Noah Meyerhans March 02, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1729-1] New gst-plugins-bad0.10 packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1729-1 [email protected] http://www.debian.org/security/ Noah Meyerhans March 02, 2009 http://www.debian.org/security/faq -...

DSA-1729-1 gst-plugins-bad0.10 - multiple vulnerabilities

Bulletin has no description...

openSUSE 10 Security Update : gstreamer010-plugins-good (gstreamer010-plugins-good-6008)

gstreamer-010: several heap overflows CVE-2009-0386, CVE-2009-0387,CVE-2009-0397 have been fixed. Remote attackers could exploit these to execute arbitrary code via QuickTime media files. if !definedfunc"nasllevel" || nasllevel = 70000 && nasllevel = 70200 && nasllevel = 80000 && nasllevel 80502...

Mandrake Security Advisory MDVSA-2009:035 (gstreamer0.10-plugins-good)

The remote host is missing an update to gstreamer0.10-plugins-good announced via advisory MDVSA-2009:035. OpenVAS Vulnerability Test $Id: mdksa2009035.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:035 gstreamer0.10-plugins-good Authors: Thomas Rein...

Mandrake Security Advisory MDVSA-2009:035 (gstreamer0.10-plugins-good)

The remote host is missing an update to gstreamer0.10-plugins-good announced via advisory MDVSA-2009:035. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

RedHat Security Advisory RHSA-2009:0269

The remote host is missing updates announced in advisory RHSA-2009:0269. The gstreamer-plugins package contains plug-ins used by the GStreamer streaming-media framework to support a wide variety of media types. An array indexing error was found in the GStreamer's QuickTime media file format...

RedHat Security Advisory RHSA-2009:0270

The remote host is missing updates announced in advisory RHSA-2009:0270. The gstreamer-plugins package contains plugins used by the GStreamer streaming-media framework to support a wide variety of media types. A heap buffer overflow was found in the GStreamer's QuickTime media file format decodin...

RedHat Security Advisory RHSA-2009:0271

The remote host is missing updates announced in advisory RHSA-2009:0271. GStreamer is a streaming media framework, based on graphs of filters which operate on media data. GStreamer Good Plug-ins is a collection of well-supported, GStreamer plug-ins of good quality released under the LGPL license...

RedHat Security Advisory RHSA-2009:0269

The remote host is missing updates announced in advisory RHSA-2009:0269. The gstreamer-plugins package contains plug-ins used by the GStreamer streaming-media framework to support a wide variety of media types. An array indexing error was found in the GStreamer SPDX-FileCopyrightText: 2009 E-Soft...

RedHat Security Advisory RHSA-2009:0270

The remote host is missing updates announced in advisory RHSA-2009:0270. The gstreamer-plugins package contains plugins used by the GStreamer streaming-media framework to support a wide variety of media types. A heap buffer overflow was found in the GStreamer SPDX-FileCopyrightText: 2009 E-Soft...

RHEL 4 : gstreamer-plugins (RHSA-2009:0270)

Updated gstreamer-plugins packages that fix one security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The gstreamer-plugins package contains plugins used by the GStreamer streaming-med...

RHEL 3 : gstreamer-plugins (RHSA-2009:0269)

Updated gstreamer-plugins packages that fix one security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. The gstreamer-plugins package contains plug-ins used by the GStreamer...

RHEL 5 : gstreamer-plugins-good (RHSA-2009:0271)

Updated gstreamer-plugins-good packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. GStreamer is a streaming media framework, based on graphs of filters whi...

gstreamer security update

CentOS Errata and Security Advisory CESA-2009:0269 Updated gstreamer-plugins packages that fix one security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. The gstreamer-plugins package...

gstreamer-plugins-good: heap-based buffer overflow while parsing malformed QuickTime media files via crafted Time-to-sample (stss) atom data

Heap-based buffer overflow in the qtdemuxparsesamples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins aka gst-plugins-good 0.10.9 through 0.10.11, and GStreamer Plug-ins aka gstreamer-plugins 0.8.5, might allow remote attackers to execute arbitrary code via crafted Time-to-sample aka...