CVE-2009-0386
gst-plugins-bad0.10 - multiple vulnerabilities
EPSS 7.1%
描述
Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11 might allow remote attackers to execute arbitrary code via crafted Composition Time To Sample (ctts) atom data in a malformed QuickTime media .mov file.
如何修補 CVE-2009-0386
要修補 CVE-2009-0386,請將受影響套件升級到下列已修補版本。
- Debian/gst-plugins-bad0.10—升級至 0.10.3-3.1+etch1 或更新版本
- PyPI/gstreamer-plugins—未列出修補版本
CVE-2009-0386 正在被利用嗎?
中等 — EPSS 為 7.1%,可持續追蹤但非最高優先。
受影響套件(2)
- from 0, < 0.10.3-3.1+etch1
- from 0, <= 0.10.9, <= 0.10.10, <= 0.10.11