Candidate: CVE-2009-1932
PublicDate: 2009-06-04 20:30:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1932
 http://secunia.com/advisories/35205/
 https://ubuntu.com/security/notices/USN-789-1
Description:
 Multiple integer overflows in the (1) user_info_callback, (2)
 user_endrow_callback, and (3) gst_pngdec_task functions
 (ext/libpng/gstpngdec.c) in GStreamer Good Plug-ins (aka gst-plugins-good
 or gstreamer-plugins-good) 0.10.15 allow remote attackers to cause a denial
 of service and possibly execute arbitrary code via a crafted PNG file,
 which triggers a buffer overflow.
Ubuntu-Description:
Notes:
Bugs:
 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=532352
 https://bugzilla.redhat.com/show_bug.cgi?id=504199
Priority: medium
Discovered-by: Tielei Wang
Assigned-to: mdeslaur
CVSS: 

Patches_gst-plugins-good0.10:
 upstream: http://cgit.freedesktop.org/gstreamer/gst-plugins-good/commit/?id=d9544bcc44adcef769cbdf7f6453e140058a3adc
upstream_gst-plugins-good0.10: needs-triage
dapper_gst-plugins-good0.10: released (0.10.3-0ubuntu4.2)
hardy_gst-plugins-good0.10: released (0.10.7-3ubuntu0.3)
intrepid_gst-plugins-good0.10: released (0.10.10.4-1ubuntu1.2)
jaunty_gst-plugins-good0.10: released (0.10.14-1ubuntu0.1)
devel_gst-plugins-good0.10: not-affected (0.10.15-2)