NVD

Id
47915  
Name
CVE-2009-0586  
Description
Integer overflow in the gst_vorbis_tag_add_coverart function (gst-libs/gst/tag/gstvorbistag.c) in vorbistag in gst-plugins-base (aka gstreamer-plugins-base) before 0.10.23 in GStreamer allows context-dependent attackers to execute arbitrary code via a crafted COVERART tag that is converted from a base64 representation, which triggers a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-03-14  
Modified Date
2010-08-21  
Seq
2009-0586  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
240199 47915 CVE-2009-0586 http://cgit.freedesktop.org/gstreamer/gst-plugins-base/commit/?id=566583e87147f774e7fc4c78b5f7e61d427e40a9  View
240200 47915 CVE-2009-0586 SUSE-SR:2009:009  View
240201 47915 CVE-2009-0586 http://ocert.org/patches/2008-015/gst-plugins-base-CVE-2009-0586.diff  View
240202 47915 CVE-2009-0586 [oss-security] 20090312 [oCERT-2008-015] glib and glib-predecessor heap overflows  View
240203 47915 CVE-2009-0586 oval:org.mitre.oval:def:9694  View
240204 47915 CVE-2009-0586 GLSA-200907-11  View
240205 47915 CVE-2009-0586 MDVSA-2009:085  View
240206 47915 CVE-2009-0586 http://www.ocert.org/advisories/ocert-2008-015.html  View
240207 47915 CVE-2009-0586 20090312 [oCERT-2008-015] glib and glib-predecessor heap overflows  View
240208 47915 CVE-2009-0586 34100  View
240209 47915 CVE-2009-0586 USN-735-1  View
240210 47915 CVE-2009-0586 gstreamer-gstvorbistagaddcoverart-bo(49274)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40561 JVNDB-2009-001567 GStreamer の gst_vorbis_tag_add_coverart 関数における整数オーバーフローの脆弱性 GStreamer の gst-plugins-base にある gst_vorbis_tag_add_coverart 関数には、base64 の変換処理に関して不備があることにより、整数オーバーフローの脆弱性が存在します。 CVE-2009-0586 38017 CVE-2009-0586 47915 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001567.html 2009-03-14 2009-07-07 View