Oval Definition:oval:org.mitre.oval:def:13822
Revision Date:2014-07-07Version:20
Title:USN-736-1 -- gst-plugins-good0.10 vulnerabilities
Description:It was discovered that GStreamer Good Plugins did not correctly handle malformed Composition Time To Sample atom data in Quicktime movie files. If a user were tricked into opening a crafted mov file, an attacker could execute arbitrary code with the privileges of the user invoking the program. It was discovered that GStreamer Good Plugins did not correctly handle malformed Sync Sample atom data in Quicktime movie files. If a user were tricked into opening a crafted mov file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. It was discovered that GStreamer Good Plugins did not correctly handle malformed Time-to-sample atom data in Quicktime movie files. If a user were tricked into opening a crafted mov file, an attacker could execute arbitrary code with the privileges of the user invoking the program
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2009-0386
CVE-2009-0387
CVE-2009-0397
USN-736-1
USN-736-1
Platform(s):Ubuntu 7.10
Ubuntu 8.04
Ubuntu 8.10
Product(s):gst-plugins-good0.10
Definition Synopsis
  • Release section
  • Ubuntu 7.10 is installed
  • AND Architecture section
  • Architecture independent section
  • Installed architecture is all
  • AND gstreamer0.10-plugins-good-doc DPKG is earlier than 0.10.6-0ubuntu4.2
  • OR Architecture depended section
  • Supported architectures section
  • Installed architecture is amd64
  • OR Installed architecture is i386
  • OR Installed architecture is powerpc
  • OR Installed architecture is sparc
  • OR Installed architecture is lpia
  • AND Packages section
  • gstreamer0.10-plugins-good DPKG is earlier than 0.10.6-0ubuntu4.2
  • OR gstreamer0.10-esd DPKG is earlier than 0.10.6-0ubuntu4.2
  • OR gstreamer0.10-plugins-good-dbg DPKG is earlier than 0.10.6-0ubuntu4.2
  • OR Release section
  • Ubuntu 8.10 is installed
  • AND Architecture section
  • Architecture independent section
  • Installed architecture is all
  • AND gstreamer0.10-plugins-good-doc DPKG is earlier than 0.10.10.4-1ubuntu1.1
  • OR Architecture depended section
  • Supported architectures section
  • Installed architecture is amd64
  • OR Installed architecture is i386
  • OR Installed architecture is powerpc
  • OR Installed architecture is sparc
  • OR Installed architecture is lpia
  • AND Packages section
  • gstreamer0.10-plugins-good DPKG is earlier than 0.10.10.4-1ubuntu1.1
  • OR gstreamer0.10-esd DPKG is earlier than 0.10.10.4-1ubuntu1.1
  • OR gstreamer0.10-plugins-good-dbg DPKG is earlier than 0.10.10.4-1ubuntu1.1
  • OR gstreamer0.10-pulseaudio DPKG is earlier than 0.10.10.4-1ubuntu1.1
  • OR Release section
  • Ubuntu 8.04 is installed
  • AND Architecture section
  • Architecture independent section
  • Installed architecture is all
  • AND gstreamer0.10-plugins-good-doc DPKG is earlier than 0.10.7-3ubuntu0.2
  • OR Architecture depended section
  • Supported architectures section
  • Installed architecture is amd64
  • OR Installed architecture is i386
  • OR Installed architecture is powerpc
  • OR Installed architecture is sparc
  • OR Installed architecture is lpia
  • AND Packages section
  • gstreamer0.10-plugins-good DPKG is earlier than 0.10.7-3ubuntu0.2
  • OR gstreamer0.10-esd DPKG is earlier than 0.10.7-3ubuntu0.2
  • OR gstreamer0.10-plugins-good-dbg DPKG is earlier than 0.10.7-3ubuntu0.2
  • BACK