Your submission was sent successfully! Close

CVE-2009-1932

Published: 4 June 2009

Multiple integer overflows in the (1) user_info_callback, (2) user_endrow_callback, and (3) gst_pngdec_task functions (ext/libpng/gstpngdec.c) in GStreamer Good Plug-ins (aka gst-plugins-good or gstreamer-plugins-good) 0.10.15 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted PNG file, which triggers a buffer overflow.

Priority

Medium

Status

Package Release Status
gst-plugins-good0.10
Launchpad, Ubuntu, Debian
dapper
Released (0.10.3-0ubuntu4.2)
hardy
Released (0.10.7-3ubuntu0.3)
intrepid
Released (0.10.10.4-1ubuntu1.2)
jaunty
Released (0.10.14-1ubuntu0.1)
upstream Needs triage