CVE-2009-0586 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2009-0586 Interim 1 14 2023-12-09T02:05:50Z current 2021-05-30T12:45:56Z 2023-12-09T02:05:50Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2009-0586 Integer overflow in the gst_vorbis_tag_add_coverart function (gst-libs/gst/tag/gstvorbistag.c) in vorbistag in gst-plugins-base (aka gstreamer-plugins-base) before 0.10.23 in GStreamer allows context-dependent attackers to execute arbitrary code via a crafted COVERART tag that is converted from a base64 representation, which triggers a heap-based buffer overflow. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WJCDUUOKMS3CW22XT7KPU24UZ4ZSGGM6/#WJCDUUOKMS3CW22XT7KPU24UZ4ZSGGM6 E-Mail link for SUSE-SR:2009:009 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SUSE Linux Enterprise Software Development Kit 11 SP4 gstreamer-0_10-plugins-base-0.10.21-2.36.1 gstreamer-0_10-plugins-base-0.10.25-1.1.133 gstreamer-0_10-plugins-base-0.10.35-5.15.8 gstreamer-0_10-plugins-base-32bit-0.10.21-2.36.1 gstreamer-0_10-plugins-base-32bit-0.10.25-1.1.133 gstreamer-0_10-plugins-base-32bit-0.10.35-5.15.8 gstreamer-0_10-plugins-base-devel-0.10.35-5.15.8 gstreamer-0_10-plugins-base-doc-0.10.21-2.36.1 gstreamer-0_10-plugins-base-doc-0.10.25-1.1.133 gstreamer-0_10-plugins-base-doc-0.10.35-5.15.8 gstreamer-0_10-plugins-base-lang-0.10.21-2.36.1 gstreamer-0_10-plugins-base-lang-0.10.25-1.1.133 gstreamer-0_10-plugins-base-lang-0.10.35-5.15.8 gstreamer-0_10-plugins-base-x86-0.10.21-2.36.1 gstreamer-0_10-plugins-base-x86-0.10.25-1.1.133 gstreamer-0_10-plugins-base-x86-0.10.35-5.15.8 libgstapp-0_10-0-0.10.25-1.1.133 libgstapp-0_10-0-0.10.35-5.15.8 libgstapp-0_10-0-32bit-0.10.25-1.1.133 libgstapp-0_10-0-32bit-0.10.35-5.15.8 libgstapp-0_10-0-x86-0.10.25-1.1.133 libgstapp-0_10-0-x86-0.10.35-5.15.8 libgstinterfaces-0_10-0-0.10.21-2.36.1 libgstinterfaces-0_10-0-0.10.25-1.1.133 libgstinterfaces-0_10-0-0.10.35-5.15.8 libgstinterfaces-0_10-0-32bit-0.10.21-2.36.1 libgstinterfaces-0_10-0-32bit-0.10.25-1.1.133 libgstinterfaces-0_10-0-32bit-0.10.35-5.15.8 libgstinterfaces-0_10-0-x86-0.10.21-2.36.1 libgstinterfaces-0_10-0-x86-0.10.25-1.1.133 libgstinterfaces-0_10-0-x86-0.10.35-5.15.8 gstreamer-0_10-plugins-base-0.10.21-2.36.1 as a component of SUSE Linux Enterprise Server 11 gstreamer-0_10-plugins-base-32bit-0.10.21-2.36.1 as a component of SUSE Linux Enterprise Server 11 gstreamer-0_10-plugins-base-doc-0.10.21-2.36.1 as a component of SUSE Linux Enterprise Server 11 gstreamer-0_10-plugins-base-lang-0.10.21-2.36.1 as a component of SUSE Linux Enterprise Server 11 gstreamer-0_10-plugins-base-x86-0.10.21-2.36.1 as a component of SUSE Linux Enterprise Server 11 libgstinterfaces-0_10-0-0.10.21-2.36.1 as a component of SUSE Linux Enterprise Server 11 libgstinterfaces-0_10-0-32bit-0.10.21-2.36.1 as a component of SUSE Linux Enterprise Server 11 libgstinterfaces-0_10-0-x86-0.10.21-2.36.1 as a component of SUSE Linux Enterprise Server 11 gstreamer-0_10-plugins-base-0.10.25-1.1.133 as a component of SUSE Linux Enterprise Server 11 SP1 gstreamer-0_10-plugins-base-32bit-0.10.25-1.1.133 as a component of SUSE Linux Enterprise Server 11 SP1 gstreamer-0_10-plugins-base-doc-0.10.25-1.1.133 as a component of SUSE Linux Enterprise Server 11 SP1 gstreamer-0_10-plugins-base-lang-0.10.25-1.1.133 as a component of SUSE Linux Enterprise Server 11 SP1 gstreamer-0_10-plugins-base-x86-0.10.25-1.1.133 as a component of SUSE Linux Enterprise Server 11 SP1 libgstapp-0_10-0-0.10.25-1.1.133 as a component of SUSE Linux Enterprise Server 11 SP1 libgstapp-0_10-0-32bit-0.10.25-1.1.133 as a component of SUSE Linux Enterprise Server 11 SP1 libgstapp-0_10-0-x86-0.10.25-1.1.133 as a component of SUSE Linux Enterprise Server 11 SP1 libgstinterfaces-0_10-0-0.10.25-1.1.133 as a component of SUSE Linux Enterprise Server 11 SP1 libgstinterfaces-0_10-0-32bit-0.10.25-1.1.133 as a component of SUSE Linux Enterprise Server 11 SP1 libgstinterfaces-0_10-0-x86-0.10.25-1.1.133 as a component of SUSE Linux Enterprise Server 11 SP1 gstreamer-0_10-plugins-base-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP2 gstreamer-0_10-plugins-base-32bit-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP2 gstreamer-0_10-plugins-base-doc-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP2 gstreamer-0_10-plugins-base-lang-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP2 gstreamer-0_10-plugins-base-x86-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP2 libgstapp-0_10-0-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP2 libgstapp-0_10-0-32bit-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP2 libgstapp-0_10-0-x86-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP2 libgstinterfaces-0_10-0-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP2 libgstinterfaces-0_10-0-32bit-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP2 libgstinterfaces-0_10-0-x86-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP2 gstreamer-0_10-plugins-base-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP3 gstreamer-0_10-plugins-base-32bit-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP3 gstreamer-0_10-plugins-base-doc-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP3 gstreamer-0_10-plugins-base-lang-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP3 gstreamer-0_10-plugins-base-x86-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP3 libgstapp-0_10-0-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP3 libgstapp-0_10-0-32bit-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP3 libgstapp-0_10-0-x86-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP3 libgstinterfaces-0_10-0-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP3 libgstinterfaces-0_10-0-32bit-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP3 libgstinterfaces-0_10-0-x86-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP3 gstreamer-0_10-plugins-base-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP4 gstreamer-0_10-plugins-base-32bit-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP4 gstreamer-0_10-plugins-base-doc-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP4 gstreamer-0_10-plugins-base-lang-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP4 gstreamer-0_10-plugins-base-x86-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP4 libgstapp-0_10-0-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP4 libgstapp-0_10-0-32bit-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP4 libgstapp-0_10-0-x86-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP4 libgstinterfaces-0_10-0-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP4 libgstinterfaces-0_10-0-32bit-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP4 libgstinterfaces-0_10-0-x86-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Server 11 SP4 gstreamer-0_10-plugins-base-0.10.21-2.36.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 gstreamer-0_10-plugins-base-32bit-0.10.21-2.36.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 gstreamer-0_10-plugins-base-doc-0.10.21-2.36.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 gstreamer-0_10-plugins-base-lang-0.10.21-2.36.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 gstreamer-0_10-plugins-base-x86-0.10.21-2.36.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 libgstinterfaces-0_10-0-0.10.21-2.36.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 libgstinterfaces-0_10-0-32bit-0.10.21-2.36.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 libgstinterfaces-0_10-0-x86-0.10.21-2.36.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 gstreamer-0_10-plugins-base-devel-0.10.35-5.15.8 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 Integer overflow in the gst_vorbis_tag_add_coverart function (gst-libs/gst/tag/gstvorbistag.c) in vorbistag in gst-plugins-base (aka gstreamer-plugins-base) before 0.10.23 in GStreamer allows context-dependent attackers to execute arbitrary code via a crafted COVERART tag that is converted from a base64 representation, which triggers a heap-based buffer overflow. CVE-2009-0586 SUSE Linux Enterprise Server 11:gstreamer-0_10-plugins-base-0.10.21-2.36.1 SUSE Linux Enterprise Server 11:gstreamer-0_10-plugins-base-32bit-0.10.21-2.36.1 SUSE Linux Enterprise Server 11:gstreamer-0_10-plugins-base-doc-0.10.21-2.36.1 SUSE Linux Enterprise Server 11:gstreamer-0_10-plugins-base-lang-0.10.21-2.36.1 SUSE Linux Enterprise Server 11:gstreamer-0_10-plugins-base-x86-0.10.21-2.36.1 SUSE Linux Enterprise Server 11:libgstinterfaces-0_10-0-0.10.21-2.36.1 SUSE Linux Enterprise Server 11:libgstinterfaces-0_10-0-32bit-0.10.21-2.36.1 SUSE Linux Enterprise Server 11:libgstinterfaces-0_10-0-x86-0.10.21-2.36.1 SUSE Linux Enterprise Server 11 SP1:gstreamer-0_10-plugins-base-0.10.25-1.1.133 SUSE Linux Enterprise Server 11 SP1:gstreamer-0_10-plugins-base-32bit-0.10.25-1.1.133 SUSE Linux Enterprise Server 11 SP1:gstreamer-0_10-plugins-base-doc-0.10.25-1.1.133 SUSE Linux Enterprise Server 11 SP1:gstreamer-0_10-plugins-base-lang-0.10.25-1.1.133 SUSE Linux Enterprise Server 11 SP1:gstreamer-0_10-plugins-base-x86-0.10.25-1.1.133 SUSE Linux Enterprise Server 11 SP1:libgstapp-0_10-0-0.10.25-1.1.133 SUSE Linux Enterprise Server 11 SP1:libgstapp-0_10-0-32bit-0.10.25-1.1.133 SUSE Linux Enterprise Server 11 SP1:libgstapp-0_10-0-x86-0.10.25-1.1.133 SUSE Linux Enterprise Server 11 SP1:libgstinterfaces-0_10-0-0.10.25-1.1.133 SUSE Linux Enterprise Server 11 SP1:libgstinterfaces-0_10-0-32bit-0.10.25-1.1.133 SUSE Linux Enterprise Server 11 SP1:libgstinterfaces-0_10-0-x86-0.10.25-1.1.133 SUSE Linux Enterprise Server 11 SP2:gstreamer-0_10-plugins-base-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP2:gstreamer-0_10-plugins-base-32bit-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP2:gstreamer-0_10-plugins-base-doc-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP2:gstreamer-0_10-plugins-base-lang-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP2:gstreamer-0_10-plugins-base-x86-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP2:libgstapp-0_10-0-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP2:libgstapp-0_10-0-32bit-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP2:libgstapp-0_10-0-x86-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP2:libgstinterfaces-0_10-0-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP2:libgstinterfaces-0_10-0-32bit-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP2:libgstinterfaces-0_10-0-x86-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP3:gstreamer-0_10-plugins-base-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP3:gstreamer-0_10-plugins-base-32bit-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP3:gstreamer-0_10-plugins-base-doc-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP3:gstreamer-0_10-plugins-base-lang-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP3:gstreamer-0_10-plugins-base-x86-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP3:libgstapp-0_10-0-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP3:libgstapp-0_10-0-32bit-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP3:libgstapp-0_10-0-x86-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP3:libgstinterfaces-0_10-0-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP3:libgstinterfaces-0_10-0-32bit-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP3:libgstinterfaces-0_10-0-x86-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP4:gstreamer-0_10-plugins-base-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP4:gstreamer-0_10-plugins-base-32bit-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP4:gstreamer-0_10-plugins-base-doc-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP4:gstreamer-0_10-plugins-base-lang-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP4:gstreamer-0_10-plugins-base-x86-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP4:libgstapp-0_10-0-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP4:libgstapp-0_10-0-32bit-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP4:libgstapp-0_10-0-x86-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP4:libgstinterfaces-0_10-0-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP4:libgstinterfaces-0_10-0-32bit-0.10.35-5.15.8 SUSE Linux Enterprise Server 11 SP4:libgstinterfaces-0_10-0-x86-0.10.35-5.15.8 SUSE Linux Enterprise Server for SAP Applications 11:gstreamer-0_10-plugins-base-0.10.21-2.36.1 SUSE Linux Enterprise Server for SAP Applications 11:gstreamer-0_10-plugins-base-32bit-0.10.21-2.36.1 SUSE Linux Enterprise Server for SAP Applications 11:gstreamer-0_10-plugins-base-doc-0.10.21-2.36.1 SUSE Linux Enterprise Server for SAP Applications 11:gstreamer-0_10-plugins-base-lang-0.10.21-2.36.1 SUSE Linux Enterprise Server for SAP Applications 11:gstreamer-0_10-plugins-base-x86-0.10.21-2.36.1 SUSE Linux Enterprise Server for SAP Applications 11:libgstinterfaces-0_10-0-0.10.21-2.36.1 SUSE Linux Enterprise Server for SAP Applications 11:libgstinterfaces-0_10-0-32bit-0.10.21-2.36.1 SUSE Linux Enterprise Server for SAP Applications 11:libgstinterfaces-0_10-0-x86-0.10.21-2.36.1 SUSE Linux Enterprise Software Development Kit 11 SP4:gstreamer-0_10-plugins-base-devel-0.10.35-5.15.8 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P