Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2009-1932
HistoryJun 04, 2009 - 8:30 p.m.

CVE-2009-1932

2009-06-0420:30:00
CWE-189
mitre
web.nvd.nist.gov
41
cve-2009-1932
gstreamer
plug-ins
buffer overflow
integer overflow
denial of service
remote code execution
png file

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

High

EPSS

0.022

Percentile

89.4%

JSON

Multiple integer overflows in the (1) user_info_callback, (2) user_endrow_callback, and (3) gst_pngdec_task functions (ext/libpng/gstpngdec.c) in GStreamer Good Plug-ins (aka gst-plugins-good or gstreamer-plugins-good) 0.10.15 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted PNG file, which triggers a buffer overflow.

Affected configurations

Nvd
Node
gstreamergood_plug-insMatch0.10.15
VendorProductVersionCPE
gstreamergood_plug-ins0.10.15cpe:2.3:a:gstreamer:good_plug-ins:0.10.15:*:*:*:*:*:*:*

Related

nessus 14
openvas 21
cvelist 1
veracode 1
redhat 1
centos 1
oraclelinux 1
ubuntu 1
ubuntucve 1
debian 1
nvd 1
prion 1
securityvulns 2
gentoo 1
nessus
nessus
Mandriva Linux Security Advisory : gstreamer0.10-plugins-good (MDVSA-2009:130-1)
2009-06-08 00:00:00
Oracle Linux 5 : gstreamer-plugins-good (ELSA-2009-1123)
2013-07-12 00:00:00
openSUSE Security Update : gstreamer-0_10-plugins-good (gstreamer-0_10-plugins-good-1717)
2010-01-06 00:00:00
openvas
openvas
CentOS Update for gstreamer-plugins-good CESA-2009:1123 centos5 i386
2011-08-09 00:00:00
Debian: Security Advisory (DSA-1839-1)
2009-07-29 00:00:00
Mandrake Security Advisory MDVSA-2009:130 (gstreamer0.10-plugins-good)
2009-06-09 00:00:00
cvelist
cvelist
CVE-2009-1932
2009-06-04 20:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:39:18
redhat
redhat
(RHSA-2009:1123) Moderate: gstreamer-plugins-good security update
2009-06-25 00:00:00
centos
centos
gstreamer security update
2009-06-26 14:01:18
oraclelinux
oraclelinux
gstreamer-plugins-good security update
2009-06-25 00:00:00
ubuntu
ubuntu
GStreamer Good Plugins vulnerability
2009-06-22 00:00:00
ubuntucve
ubuntucve
CVE-2009-1932
2009-06-04 00:00:00
debian
debian
[SECURITY] [DSA 1839-1] New gst-plugins-good0.10 packages fix arbitrary code execution
2009-07-19 07:06:36
nvd
nvd
CVE-2009-1932
2009-06-04 20:30:00
prion
prion
Integer overflow
2009-06-04 20:30:00
securityvulns
securityvulns
GStreamer Good Plug-ins DoS
2009-06-06 00:00:00
[ MDVSA-2009:130 ] gstreamer0.10-plugins-good
2009-06-06 00:00:00
gentoo
gentoo
GStreamer plug-ins: User-assisted execution of arbitrary code
2009-07-12 00:00:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

High

EPSS

0.022

Percentile

89.4%

JSON
Related for CVE-2009-1932
nessus14openvas21cvelist1veracode1redhat1centos1oraclelinux1ubuntu1ubuntucve1debian1nvd1prion1securityvulns2gentoo1