PT-2009-3229 · Gstreamer+1 · Gst-Plugins-Base+1

Tomas Hoger · Published 2009-03-14 · Updated 2023-02-13 · CVE-2009-0586

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions gst-plugins-base versions prior to 0.10.23

Description The issue is related to an integer overflow in the gst vorbis tag add coverart function, which can lead to a heap-based buffer overflow. This occurs when a crafted COVERART tag, converted from a base64 representation, is processed. The overflow can be exploited by context-dependent attackers to execute arbitrary code.

Recommendations For versions prior to 0.10.23, update to version 0.10.23 or later to resolve the issue. As a temporary workaround, consider restricting the processing of COVERART tags from untrusted sources until the update is applied.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2009-0586

RHSA-2009:0352

RHSA-2009_0352

Affected Products

Red Hat

Gst-Plugins-Base

References · 18

• https://nvd.nist.gov/vuln/detail/CVE-2009-0586 · Security Note
• http://cgit.freedesktop.org/gstreamer/gst-plugins-base/commit/?id=566583e87147f774e7fc4c78b5f7e61d427e40a9 · Patch
• http://mandriva.com/security/advisories?name=MDVSA-2009:085 · Vendor Advisory
• http://securityfocus.com/bid/34100 · Patch
• http://security.gentoo.org/glsa/glsa-200907-11.xml · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html · Vendor Advisory
• http://openwall.com/lists/oss-security/2009/03/12/2 · Patch
• http://ubuntu.com/usn/USN-735-1 · Vendor Advisory
• http://ocert.org/patches/2008-015/gst-plugins-base-CVE-2009-0586.diff · Patch
• https://access.redhat.com/security/cve/CVE-2009-0586 · Note
• http://secunia.com/advisories/34350 · Note
• http://ocert.org/advisories/ocert-2008-015.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49274 · Note
• https://access.redhat.com/errata/RHSA-2009:0352 · Note
• http://securityfocus.com/archive/1/501712/100/0/threaded · Note