Red Hat Security Advisory

RHSA-2011:1264

gstreamer-plugins security update

Released 2011-09-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AS version 4 gstreamer-plugins-0.8.5-1.EL.4, gstreamer-plugins-0.8.5-1.EL.4.i386, gstreamer-plugins-0.8.5-1.EL.4.ia64 +5
Red Hat Enterprise Linux Desktop version 4 gstreamer-plugins-0.8.5-1.EL.4, gstreamer-plugins-0.8.5-1.EL.4.i386, gstreamer-plugins-devel-0.8.5-1.EL.4 +1
Red Hat Enterprise Linux ES version 4 gstreamer-plugins-0.8.5-1.EL.4, gstreamer-plugins-0.8.5-1.EL.4.i386, gstreamer-plugins-0.8.5-1.EL.4.ia64 +3
Red Hat Enterprise Linux WS version 4 gstreamer-plugins-0.8.5-1.EL.4, gstreamer-plugins-0.8.5-1.EL.4.i386, gstreamer-plugins-0.8.5-1.EL.4.ia64 +3

Fixes 5 records

TI-2011-02568 CVE-2011-2915 · GHSA-5fmx-q427-7v37

Off-by-one error in the CSoundFile::ReadAMS2 function in src/load_ams.cpp in libmodplug…

LOW 37

Off-by-one error in the CSoundFile::ReadAMS2 function in src/load_ams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a cr…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04151 Published 2012-06-07 Fixed CWE-189

TI-2011-02567 CVE-2011-2914 · GHSA-cgc2-53vh-7rq5

Off-by-one error in the CSoundFile::ReadDSM function in src/load_dms.cpp in libmodplug…

LOW 37

Off-by-one error in the CSoundFile::ReadDSM function in src/load_dms.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a cra…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04532 Published 2012-06-07 Fixed CWE-189

TI-2011-02566 CVE-2011-2913 · GHSA-rrc2-4wm9-xw5p

Off-by-one error in the CSoundFile::ReadAMS function in src/load_ams.cpp in libmodplug…

LOW 37

Off-by-one error in the CSoundFile::ReadAMS function in src/load_ams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (stack memory corruption) and possibly execute arbitrary code via…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04527 Published 2012-06-07 Fixed CWE-189

TI-2011-02565 CVE-2011-2912 · GHSA-7wj6-grc4-qcxr

Stack-based buffer overflow in the CSoundFile::ReadS3M function in src/load_s3m.cpp in…

LOW 37

Stack-based buffer overflow in the CSoundFile::ReadS3M function in src/load_s3m.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted S3M…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04296 Published 2012-06-07 Fixed CWE-119

TI-2011-02564 CVE-2011-2911 · GHSA-c5vv-mhrm-6wxg

Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug…

LOW 37

Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04296 Published 2012-06-07 Fixed CWE-189