CVE-2009-0586

Integer overflow in the gst_vorbis_tag_add_coverart function (gst-libs/gst/tag/gstvorbistag.c) in vorbistag in gst-plugins-base (aka gstreamer-plugins-base) before 0.10.23 in GStreamer allows context-dependent attackers to execute arbitrary code via a crafted COVERART tag that is converted from a base64 representation, which triggers a heap-based buffer overflow.

• CWE-190

• http://cgit.freedesktop.org/gstreamer/gst-plugins-base/commit/?id=566583e87147f774e7fc4c78b5f7e61d427e40a9Patch, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.htmlBroken Link, Mailing List, Third Party Advisory
• http://ocert.org/patches/2008-015/gst-plugins-base-CVE-2009-0586.diffPatch
• http://openwall.com/lists/oss-security/2009/03/12/2Mailing List, Patch, Third Party Advisory
• http://secunia.com/advisories/34335Not Applicable
• http://secunia.com/advisories/34350Not Applicable
• http://secunia.com/advisories/35777Not Applicable
• http://security.gentoo.org/glsa/glsa-200907-11.xmlThird Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:085Broken Link
• http://www.ocert.org/advisories/ocert-2008-015.htmlThird Party Advisory
• http://www.securityfocus.com/archive/1/501712/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/34100Patch, Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-735-1Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49274Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9694Third Party Advisory
• http://cgit.freedesktop.org/gstreamer/gst-plugins-base/commit/?id=566583e87147f774e7fc4c78b5f7e61d427e40a9Patch, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.htmlBroken Link, Mailing List, Third Party Advisory
• http://ocert.org/patches/2008-015/gst-plugins-base-CVE-2009-0586.diffPatch
• http://openwall.com/lists/oss-security/2009/03/12/2Mailing List, Patch, Third Party Advisory
• http://secunia.com/advisories/34335Not Applicable
• http://secunia.com/advisories/34350Not Applicable
• http://secunia.com/advisories/35777Not Applicable
• http://security.gentoo.org/glsa/glsa-200907-11.xmlThird Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:085Broken Link
• http://www.ocert.org/advisories/ocert-2008-015.htmlThird Party Advisory
• http://www.securityfocus.com/archive/1/501712/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/34100Patch, Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-735-1Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49274Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9694Third Party Advisory

Published

Mar 14, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-0580Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, an…
• CVE-2009-0581Memory leak in LittleCMS (aka lcms or liblcms) before 1.18be…
• CVE-2009-0582The ntlm_challenge function in the NTLM SASL authentication …
• CVE-2009-0583Multiple integer overflows in icc.c in the International Col…
• CVE-2009-0584icc.c in the International Color Consortium (ICC) Format lib…
• CVE-2009-0585Integer overflow in the soup_base64_encode function in soup-…
• CVE-2009-0587Multiple integer overflows in Evolution Data Server (aka evo…
• CVE-2009-0588agent/request/op.cgi in the Registration Authority (RA) comp…
• CVE-2009-0589Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2009-0590The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k a…
• CVE-2009-0591The CMS_verify function in OpenSSL 0.9.8h through 0.9.8j, wh…
• CVE-2009-0592Multiple directory traversal vulnerabilities in PNphpBB2 1.2…