CVE-2009-0586: Integer Overflow
Integer overflow in the gstvorbistagaddcoverart function (gst-libs/gst/tag/gstvorbistag.c) in vorbistag in gst-plugins-base (aka gstreamer-plugins-base) before 0.10.23 in GStreamer allows context-dependent attackers to execute arbitrary code via a crafted COVERART tag that is converted from a base64 representation, which triggers a heap-based buffer overflow.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0586?
CVE-2009-0586 is considered a critical vulnerability that can lead to arbitrary code execution.
How do I fix CVE-2009-0586?
To fix CVE-2009-0586, upgrade GStreamer to version 0.10.23 or later.
Who is affected by CVE-2009-0586?
CVE-2009-0586 affects GStreamer versions before 0.10.23 and specific versions of Ubuntu Linux.
What type of attack is associated with CVE-2009-0586?
CVE-2009-0586 is associated with context-dependent attacks exploiting an integer overflow.
What impact does CVE-2009-0586 have on systems?
The impact of CVE-2009-0586 can lead to execution of arbitrary code, potentially compromising system security.