Oval Definition:oval:org.mitre.oval:def:13584
Revision Date:2014-06-23Version:20
Title:DSA-1851-1 gst-plugins-bad0.10 -- integer overflow
Description:It was discovered that gst-plugins-bad0.10, the GStreamer plugins from the "bad" set, is prone to an integer overflow when processing a MED file with a crafted song comment or song name. For the stable distribution, this problem has been fixed in version 0.10.7-2+lenny2. For the oldstable distribution, this problem has been fixed in version 0.10.3-3.1+etch3. For the testing distribution and the unstable distribution , gst-plugins-bad0.10 links against libmodplug. We recommend that you upgrade your gst-plugins-bad0.10 packages.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2009-1438
DSA-1851-1
Platform(s):Debian GNU/Linux 4.0
Debian GNU/Linux 5.0
Product(s):gst-plugins-bad0.10
Definition Synopsis
  • Release section
  • Debian GNU/Linux 5.0 is installed
  • AND Architecture section
  • Architecture independent section
  • Installed architecture is all
  • AND gstreamer0.10-plugins-bad-doc DPKG is earlier than 0.10.7-2+lenny2
  • OR Architecture depended section
  • Supported architectures section
  • Installed architecture is s390
  • OR Installed architecture is amd64
  • OR Installed architecture is sparc
  • OR Installed architecture is arm
  • OR Installed architecture is i386
  • OR Installed architecture is armel
  • OR Installed architecture is mips
  • OR Installed architecture is ia64
  • OR Installed architecture is alpha
  • OR Installed architecture is powerpc
  • OR Installed architecture is mipsel
  • OR Installed architecture is hppa
  • AND Packages section
  • gstreamer0.10-plugins-bad-dbg DPKG is earlier than 0.10.7-2+lenny2
  • OR gstreamer0.10-sdl DPKG is earlier than 0.10.7-2+lenny2
  • OR gstreamer0.10-plugins-bad DPKG is earlier than 0.10.7-2+lenny2
  • OR Release section
  • Debian GNU/Linux 4.0 is installed.
  • AND gstreamer0.10-plugins-bad DPKG is earlier than 0.10.3-3.1+etch3
  • BACK