CVE-2009-0398

Publication date 3 February 2009

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Array index error in the gst_qtp_trak_handler function in gst/qtdemux/qtdemux.c in GStreamer Plug-ins (aka gstreamer-plugins) 0.6.0 allows remote attackers to have an unknown impact via a crafted QuickTime media file.

Read the notes from the security team

Status

Package Ubuntu Release Status
gst-plugins-good0.10 8.10 intrepid
Not affected
8.04 LTS hardy
Not affected
7.10 gutsy
Not affected
6.06 LTS dapper
Not affected
gst-plugins0.8 8.10 intrepid Not in release
8.04 LTS hardy Not in release
7.10 gutsy Not in release
6.06 LTS dapper
Not affected

Notes

mdeslaur

code not present in 0.8 or 0.10