CVE-2009-0387
Last modified
CVE-2009-0387 is a vulnerability of currently unknown severity. Array index error in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted Sync Sample (aka stss) atom data in a malformed QuickTime media .mov file, related to "mark keyframes.". EPSS estimates a 6.48% chance of exploitation in the next 30 days.
Description
Array index error in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted Sync Sample (aka stss) atom data in a malformed QuickTime media .mov file, related to "mark keyframes."
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Gstreamer | Good Plug-Ins | 0.10.9 |
| Gstreamer | Good Plug-Ins | 0.10.10 |
| Gstreamer | Good Plug-Ins | 0.10.11 |
| Gstreamer | Plug-Ins | 0.8.5 |
References
- http://gstreamer.freedesktop.org/releases/gst-plugins-good/0.10.12.htmlPatch, Vendor Advisory
- http://secunia.com/advisories/33650Vendor Advisory
- http://gstreamer.freedesktop.org/releases/gst-plugins-good/0.10.12.htmlPatch, Vendor Advisory
- http://secunia.com/advisories/33650Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2009-0387?
How severe is CVE-2009-0387?
How do I fix CVE-2009-0387?
Are you affected by CVE-2009-0387?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST