Multiple integer overflows in the (1) user_info_callback, (2) user_endrow_callback, and (3) gst_pngdec_task functions (ext/libpng/gstpngdec.c) in GStreamer Good Plug-ins (aka gst-plugins-good or gstreamer-plugins-good) 0.10.15 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted PNG file, which triggers a buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade gstreamer-plugins-goodUpgrade gstreamer-plugins-good-devel | Dec 1, 2016 | Jun 4, 2009 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-base.Upgrade media-plugins/gst-plugins-libpng.Upgrade media-libs/gst-plugins-good. | Oct 30, 2017 | Jun 4, 2009 |
| Oracle_linux | — | Upgrade gstreamer-plugins-good-develUpgrade gstreamer-plugins-good | Oct 16, 2024 | Jun 4, 2009 |
| Suse | — | Upgrade gstreamer-0_10-plugins-goodUpgrade gstreamer-0_10-plugins-good-docUpgrade gstreamer-0_10-plugins-good-lang | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade gstreamer0.10-plugins-good | Nov 8, 2024 | Jun 4, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub