Heap-based Buffer Overflow in GStreamer Good Plug-ins Affecting Remote Code Execution
CVE-2009-0386

Currently unrated

Key Information:

Vendor: Gstreamer
Status: Good Plug-ins
Vendor: CVE Published:; 2 February 2009

What is CVE-2009-0386?

A heap-based buffer overflow vulnerability exists in the qtdemux_parse_samples function within the GStreamer Good Plug-ins package, which may allow attackers to execute arbitrary code. This can occur when processing specially crafted .mov files that contain malformed Composition Time To Sample (ctts) atom data. Exploitation of this vulnerability may permit a remote attacker to gain control over the affected system.