PT-2009-3229 · Gstreamer+1 · Gst-Plugins-Base+1

Tomas Hoger · Publicado 2009-03-14 · Atualizado 2023-02-13 · CVE-2009-0586

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions gst-plugins-base versions prior to 0.10.23

Description The issue is related to an integer overflow in the gst vorbis tag add coverart function, which can lead to a heap-based buffer overflow. This occurs when a crafted COVERART tag, converted from a base64 representation, is processed. The overflow can be exploited by context-dependent attackers to execute arbitrary code.

Recommendations For versions prior to 0.10.23, update to version 0.10.23 or later to resolve the issue. As a temporary workaround, consider restricting the processing of COVERART tags from untrusted sources until the update is applied.

Correção

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

CVE-2009-0586

RHSA-2009:0352

RHSA-2009_0352

Produtos afetados

Red Hat

Gst-Plugins-Base

Referências · 18

• https://nvd.nist.gov/vuln/detail/CVE-2009-0586 · Nota de Segurança
• http://cgit.freedesktop.org/gstreamer/gst-plugins-base/commit/?id=566583e87147f774e7fc4c78b5f7e61d427e40a9 · Correção
• http://mandriva.com/security/advisories?name=MDVSA-2009:085 · Aviso do Fabricante
• http://securityfocus.com/bid/34100 · Correção
• https://access.redhat.com/security/cve/CVE-2009-0586 · Nota
• http://security.gentoo.org/glsa/glsa-200907-11.xml · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html · Aviso do Fabricante
• http://secunia.com/advisories/34350 · Nota
• http://ocert.org/advisories/ocert-2008-015.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49274 · Nota
• http://openwall.com/lists/oss-security/2009/03/12/2 · Correção
• http://ubuntu.com/usn/USN-735-1 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2009:0352 · Nota
• http://securityfocus.com/archive/1/501712/100/0/threaded · Nota
• http://ocert.org/patches/2008-015/gst-plugins-base-CVE-2009-0586.diff · Correção