GStreamer Base Plugins vulnerability

2009-03-1600:00:00

ubuntu.com

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

Low

EPSS

0.011

Percentile

84.6%

JSON

Releases

Ubuntu 8.10

Packages

gst-plugins-base0.10 -

Details

It was discovered that the Base64 decoding functions in GStreamer Base
Plugins did not properly handle large images in Vorbis file tags. If a user
were tricked into opening a specially crafted Vorbis file, an attacker
could possibly execute arbitrary code with user privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.10noarchgstreamer0.10-plugins-base< 0.10.21-3ubuntu0.1UNKNOWN
Ubuntu8.10noarchgstreamer0.10-alsa< 0.10.21-3ubuntu0.1UNKNOWN
Ubuntu8.10noarchgstreamer0.10-gnomevfs< 0.10.21-3ubuntu0.1UNKNOWN
Ubuntu8.10noarchgstreamer0.10-plugins-base-apps< 0.10.21-3ubuntu0.1UNKNOWN
Ubuntu8.10noarchgstreamer0.10-plugins-base-dbg< 0.10.21-3ubuntu0.1UNKNOWN
Ubuntu8.10noarchgstreamer0.10-x< 0.10.21-3ubuntu0.1UNKNOWN
Ubuntu8.10noarchlibgstreamer-plugins-base0.10-0< 0.10.21-3ubuntu0.1UNKNOWN
Ubuntu8.10noarchlibgstreamer-plugins-base0.10-dev< 0.10.21-3ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	8.10	noarch	gstreamer0.10-plugins-base	< 0.10.21-3ubuntu0.1	UNKNOWN
Ubuntu	8.10	noarch	gstreamer0.10-alsa	< 0.10.21-3ubuntu0.1	UNKNOWN
Ubuntu	8.10	noarch	gstreamer0.10-gnomevfs	< 0.10.21-3ubuntu0.1	UNKNOWN
Ubuntu	8.10	noarch	gstreamer0.10-plugins-base-apps	< 0.10.21-3ubuntu0.1	UNKNOWN
Ubuntu	8.10	noarch	gstreamer0.10-plugins-base-dbg	< 0.10.21-3ubuntu0.1	UNKNOWN
Ubuntu	8.10	noarch	gstreamer0.10-x	< 0.10.21-3ubuntu0.1	UNKNOWN
Ubuntu	8.10	noarch	libgstreamer-plugins-base0.10-0	< 0.10.21-3ubuntu0.1	UNKNOWN
Ubuntu	8.10	noarch	libgstreamer-plugins-base0.10-dev	< 0.10.21-3ubuntu0.1	UNKNOWN