Veracode Vulnerability DatabaseVERACODE:23892Denial Of Service (DoS)
EPSS
Percentile
89.4%
GStreamer is denial of service (DoS). Multiple integer overflow flaws, that could lead to a buffer overflow, were found in the GStreamer Good Plug-ins PNG decoding handler. An attacker could create a specially-crafted PNG file that would cause an application using the GStreamer Good Plug-ins library to crash or, potentially, execute arbitrary code as the user running the application when parsed.
References
cgit.freedesktop.org/gstreamer/gst-plugins-good/commit/?id=d9544bcc44adcef769cbdf7f6453e140058a3adc
osvdb.org/54827
secunia.com/advisories/35205
secunia.com/advisories/35583
secunia.com/advisories/35777
secunia.com/advisories/35897
security.gentoo.org/glsa/glsa-200907-11.xml
www.debian.org/security/2009/dsa-1839
www.mandriva.com/security/advisories?name=MDVSA-2009:130
www.redhat.com/security/updates/classification/#moderate
www.redhat.com/support/errata/RHSA-2009-1123.html
www.securityfocus.com/bid/35172
www.vupen.com/english/advisories/2009/1506
access.redhat.com/errata/RHSA-2009:1123
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10798
Related
