Package(s):	gstreamer-plugins-good	CVE #(s):	CVE-2009-0386 CVE-2009-0387
Created:	February 6, 2009	Updated:	December 22, 2016
Description:	Multiple heap buffer overflows and an array indexing error were found in the GStreamer's QuickTime media file format decoding plugin. An attacker could create a carefully-crafted QuickTime media .mov file that would cause an application using GStreamer to crash or, potentially, execute arbitrary code if played by a victim.
Alerts:	Oracle ELSA-2016-2975 gstreamer-plugins-good 2016-12-21 Gentoo 200907-11 gst-plugins-good 2009-07-12 Ubuntu USN-736-1 gst-plugins-good0.10 2009-03-16 Debian DSA-1729-1 gst-plugins-bad0.10 2009-03-02 SuSE SUSE-SR:2009:005 dhcp, ntp/xntp, squid, wireshark, libpng, pam_mount, enscript, eID-belgium, gstreamer-0_10-plugins-good 2009-03-02 Fedora FEDORA-2009-1213 gstreamer-plugins-good 2009-02-05 Fedora FEDORA-2009-1343 gstreamer-plugins-good 2009-02-05 Mandriva MDVSA-2009:035 gstreamer0.10-plugins-good 2009-02-10 Red Hat RHSA-2009:0271-01 gstreamer-plugins-good 2009-02-06

---

to post comments