CVE-2009-0586

Published: Mar 14, 2009Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Integer overflow in the gst_vorbis_tag_add_coverart function (gst-libs/gst/tag/gstvorbistag.c) in vorbistag in gst-plugins-base (aka gstreamer-plugins-base) before 0.10.23 in GStreamer allows context-dependent attackers to execute arbitrary code via a crafted COVERART tag that is converted from a base64 representation, which triggers a heap-based buffer overflow.

Affected (2)

Products: Gstreamer: Gstreamer · Canonical: Ubuntu Linux

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gstreamer Gstreamer	Before 0.10.23

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 8.10

Related CWEs

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (30)

http://cgit.freedesktop.org/gstreamer/gst-plugins-base/commit/?id=566583e87147f774e7fc4c78b5f7e61d427e40a9

Source: secalert@redhat.com

PatchThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html

Source: secalert@redhat.com

Broken LinkMailing ListThird Party Advisory

http://ocert.org/patches/2008-015/gst-plugins-base-CVE-2009-0586.diff

Source: secalert@redhat.com

Patch

http://openwall.com/lists/oss-security/2009/03/12/2

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://secunia.com/advisories/34335

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/34350

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/35777

Source: secalert@redhat.com

Not Applicable

http://security.gentoo.org/glsa/glsa-200907-11.xml

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2009:085

Source: secalert@redhat.com

Broken Link

http://www.ocert.org/advisories/ocert-2008-015.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/archive/1/501712/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/34100

Source: secalert@redhat.com

PatchThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-735-1

Source: secalert@redhat.com

Third Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/49274

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9694

Source: secalert@redhat.com

Third Party Advisory

http://cgit.freedesktop.org/gstreamer/gst-plugins-base/commit/?id=566583e87147f774e7fc4c78b5f7e61d427e40a9

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkMailing ListThird Party Advisory

http://ocert.org/patches/2008-015/gst-plugins-base-CVE-2009-0586.diff

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://openwall.com/lists/oss-security/2009/03/12/2

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

http://secunia.com/advisories/34335

Source: af854a3a-2127-422b-91ae-364da2661108

Not Applicable

http://secunia.com/advisories/34350

Source: af854a3a-2127-422b-91ae-364da2661108

Not Applicable

http://secunia.com/advisories/35777

Source: af854a3a-2127-422b-91ae-364da2661108

Not Applicable

http://security.gentoo.org/glsa/glsa-200907-11.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2009:085

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.ocert.org/advisories/ocert-2008-015.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.securityfocus.com/archive/1/501712/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/34100

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-735-1

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/49274

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9694

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.