CVE-2009-0397: Buffer Overflow
Heap-based buffer overflow in the qtdemuxparsesamples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11, and GStreamer Plug-ins (aka gstreamer-plugins) 0.8.5, might allow remote attackers to execute arbitrary code via crafted Time-to-sample (aka stts) atom data in a malformed QuickTime media .mov file.
Other sources
Multiple heap-based buffer overflow vulnerabilities and one an array index out of bounds vulnerability has been reported by Tobias Klein to be present in the GStreamer demuxer responsible for demuxing QuickTime media .mov files into raw or compressed audio and/or video streams. A remote attacker could use this flaws to execute arbitrary code in the context of an application using the GStreamer multimedia framework.
References: http://trapkit.de/advisories/TKADV2009-003.txt http://getsongbird.com/ http://projects.gnome.org/totem/ http://amarok.kde.org/ http://cgit.freedesktop.org/gstreamer/gst-plugins-good/commit/?id=bdc20b9baf13564d9a061343416395f8f9a92b53
Proposed solution: Upgrade to GStreamer gst-plugins-good version >= 0.10.12.
Credit: Tobias Klein
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/gstreamer-plugins-goodto a version that resolves this vulnerability.Fixed in 0:0.10.9-1.el5_3.1 - Upgrade
Upgrade
gstreamer/gst-plugins-goodto a version that resolves this vulnerability.Fixed in 0.10.12Patch bdc20b9baf13564d9a061343416395f8f9a92b53
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2009-0397?
CVE-2009-0397 is classified as a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2009-0397?
To fix CVE-2009-0397, update your GStreamer Good Plug-ins to version 0.10.11 or later.
What software versions are affected by CVE-2009-0397?
CVE-2009-0397 affects GStreamer Good Plug-ins versions 0.10.9 through 0.10.11 and GStreamer Plug-ins version 0.8.5.
Can CVE-2009-0397 be exploited remotely?
Yes, CVE-2009-0397 can be exploited by remote attackers through crafted Time-to-sample data.
What impact does CVE-2009-0397 have on my system?
The impact of CVE-2009-0397 could allow attackers to execute arbitrary code on affected systems.