Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-0398
HistoryFeb 03, 2009 - 12:00 a.m.

CVE-2009-0398

2009-02-0300:00:00
ubuntu.com
ubuntu.com
13

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.013

Percentile

86.0%

Array index error in the gst_qtp_trak_handler function in
gst/qtdemux/qtdemux.c in GStreamer Plug-ins (aka gstreamer-plugins) 0.6.0
allows remote attackers to have an unknown impact via a crafted QuickTime
media file.

Notes

Author Note
mdeslaur code not present in 0.8 or 0.10

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.013

Percentile

86.0%