CVE-2009-0398 Memory corruption in n/a
Remote attackers can exploit an array index error in GStreamer QuickTime demuxer via crafted media files, potentially causing crashes or code execution.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2009-0398?
CVE-2009-0398 is a critical memory corruption vulnerability in n/a, published on 3 Feb 2009. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Array index error in the gst_qtp_trak_handler function in gst/qtdemux/qtdemux.c in GStreamer Plug-ins (aka gstreamer-plugins) 0.6.0 allows remote attackers to have an unknown impact via a crafted QuickTime media file.
Weakness: CWE-119
Which versions are affected by CVE-2009-0398?
It affects 1 product.
Linux distribution packages (12)
gstreamer-plugins Red Hat:enterprise_linux:3::as | All versions | 0:0.6.0-19 |
gstreamer-plugins-debuginfo Red Hat:enterprise_linux:3::as | All versions | 0:0.6.0-19 |
gstreamer-plugins-devel Red Hat:enterprise_linux:3::as | All versions | 0:0.6.0-19 |
gstreamer-plugins Red Hat:enterprise_linux:3::desktop | All versions | 0:0.6.0-19 |
gstreamer-plugins-debuginfo Red Hat:enterprise_linux:3::desktop | All versions | 0:0.6.0-19 |
gstreamer-plugins-devel Red Hat:enterprise_linux:3::desktop | All versions | 0:0.6.0-19 |
gstreamer-plugins Red Hat:enterprise_linux:3::es | All versions | 0:0.6.0-19 |
gstreamer-plugins-debuginfo Red Hat:enterprise_linux:3::es | All versions | 0:0.6.0-19 |
gstreamer-plugins-devel Red Hat:enterprise_linux:3::es | All versions | 0:0.6.0-19 |
gstreamer-plugins Red Hat:enterprise_linux:3::ws | All versions | 0:0.6.0-19 |
gstreamer-plugins-debuginfo Red Hat:enterprise_linux:3::ws | All versions | 0:0.6.0-19 |
gstreamer-plugins-devel Red Hat:enterprise_linux:3::ws | All versions | 0:0.6.0-19 |
Products include Gstreamer Plug-Ins.
How do I fix CVE-2009-0398?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2009-0398 being exploited?
There is no known exploitation of CVE-2009-0398 in the wild and no public exploit code.
Sources
Also known as GHSA-6qh3-3xvg-2wvc, RHSA-2009:0269.