CVE-2009-0586 Integer overflow in n/a

High 7.5 Published 14 Mar 2009 Updated 7 Aug 2024

An integer overflow in GStreamer's vorbistag plugin allows attackers to execute arbitrary code via a crafted COVERART tag.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2009-0586?

CVE-2009-0586 is a high-severity vulnerability in Canonical Ubuntu Linux, published on 14 Mar 2009. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

Integer overflow in the gst_vorbis_tag_add_coverart function (gst-libs/gst/tag/gstvorbistag.c) in vorbistag in gst-plugins-base (aka gstreamer-plugins-base) before 0.10.23 in GStreamer allows context-dependent attackers to execute arbitrary code via a crafted COVERART tag that is converted from a base64 representation, which triggers a heap-based buffer overflow.

Weakness: CWE-190

Which versions are affected by CVE-2009-0586?

It affects 2 products.

Linux distribution packages (8)

`gstreamer-plugins-base` Red Hat:enterprise_linux:5::client	All versions	`0:0.10.20-3.0.1.el5_3`
`gstreamer-plugins-base-debuginfo` Red Hat:enterprise_linux:5::client	All versions	`0:0.10.20-3.0.1.el5_3`
`gstreamer-plugins-base` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:0.10.20-3.0.1.el5_3`
`gstreamer-plugins-base-debuginfo` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:0.10.20-3.0.1.el5_3`
`gstreamer-plugins-base-devel` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:0.10.20-3.0.1.el5_3`
`gstreamer-plugins-base` Red Hat:enterprise_linux:5::server	All versions	`0:0.10.20-3.0.1.el5_3`
`gstreamer-plugins-base-debuginfo` Red Hat:enterprise_linux:5::server	All versions	`0:0.10.20-3.0.1.el5_3`
`gstreamer-plugins-base-devel` Red Hat:enterprise_linux:5::server	All versions	`0:0.10.20-3.0.1.el5_3`

Products include Canonical Ubuntu Linux, Gstreamer Gstreamer.

How do I fix CVE-2009-0586?

Upgrade to a fixed version.

Is CVE-2009-0586 being exploited?

There is no known exploitation of CVE-2009-0586 in the wild and no public exploit code.

All Canonical Ubuntu Linux vulnerabilities

Sources

Also known as GHSA-x2gq-fc4q-qphg, RHSA-2009:0352.