Lucene search

K
redhatRedHatRHSA-2009:0270
HistoryFeb 06, 2009 - 12:00 a.m.

(RHSA-2009:0270) Important: gstreamer-plugins security update

2009-02-0600:00:00
access.redhat.com
14

EPSS

0.086

Percentile

94.5%

The gstreamer-plugins package contains plugins used by the GStreamer
streaming-media framework to support a wide variety of media types.

A heap buffer overflow was found in the GStreamer’s QuickTime media file
format decoding plug-in. An attacker could create a carefully-crafted
QuickTime media .mov file that would cause an application using GStreamer
to crash or, potentially, execute arbitrary code if played by a victim.
(CVE-2009-0397)

All users of gstreamer-plugins are advised to upgrade to these updated
packages, which contain a backported patch to correct this issue. After
installing the update, all applications using GStreamer (such as rhythmbox)
must be restarted for the changes to take effect.