{"schemaVersion":3,"id":"CVE-2009-0586","aliases":["RHSA-2009:0352"],"status":"published","duplicateOf":null,"title":null,"description":"Integer overflow in the gst_vorbis_tag_add_coverart function (gst-libs/gst/tag/gstvorbistag.c) in vorbistag in gst-plugins-base (aka gstreamer-plugins-base) before 0.10.23 in GStreamer allows context-dependent attackers to execute arbitrary code via a crafted COVERART tag that is converted from a base64 representation, which triggers a heap-based buffer overflow.","dates":{"published":"2009-03-14T18:00:00.000Z","modified":"2024-08-07T04:40:04.340Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.5,"severity":"high","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.05523,"percentile":0.92781,"severity":"low","asOf":"2026-10-22T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-22T00:00:00.000Z","baselineScore":0.05523},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-22T00:00:00.000Z","score":0.05523,"percentile":0.92781}],"last30":[{"date":"2026-09-22T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.05523,"percentile":null},{"date":"2026-10-22T00:00:00.000Z","score":0.05523,"percentile":0.92781}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-190","name":"Integer Overflow or Wraparound","description":"The product performs a calculation that can\n         produce an integer overflow or wraparound when the logic\n         assumes that the resulting value will always be larger than\n         the original value. This occurs when an integer value is\n         incremented to a value that is too large to store in the\n         associated representation. When this occurs, the value may\n         become a very small or negative number.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/190.html"}],"affected":[{"vendor":"canonical","product":"ubuntu_linux","name":"ubuntu linux","label":"ubuntu_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"8.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"8.10","eol":{"isEol":true,"eolDate":"2010-04-30T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"8.10","label":"8.10 'Intrepid Ibex'","eolFrom":"2010-04-30T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"8.10"},"product":{"name":"ubuntu","label":"Ubuntu","category":"os"}},"hubHref":"/vendor/canonical/ubuntu_linux"},{"vendor":"gstreamer","product":"gstreamer","name":"GStreamer","label":"gstreamer","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 0.10.23","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.10.23","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"gstreamer","label":"GStreamer","category":"framework"}},"hubHref":"/vendor/gstreamer/gstreamer"},{"vendor":"redhat","product":"gstreamer-plugins-base","name":"gstreamer-plugins-base","label":"gstreamer-plugins-base","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/gstreamer-plugins-base","purlType":"rpm","versions":[{"text":"< 0:0.10.20-3.0.1.el5_3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:0.10.20-3.0.1.el5_3","eol":null,"hubHref":null},{"vendor":"redhat","product":"gstreamer-plugins-base-debuginfo","name":"gstreamer-plugins-base-debuginfo","label":"gstreamer-plugins-base-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/gstreamer-plugins-base-debuginfo","purlType":"rpm","versions":[{"text":"< 0:0.10.20-3.0.1.el5_3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:0.10.20-3.0.1.el5_3","eol":null,"hubHref":null},{"vendor":"redhat","product":"gstreamer-plugins-base-devel","name":"gstreamer-plugins-base-devel","label":"gstreamer-plugins-base-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/gstreamer-plugins-base-devel","purlType":"rpm","versions":[{"text":"< 0:0.10.20-3.0.1.el5_3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:0.10.20-3.0.1.el5_3","eol":null,"hubHref":null}],"affectedCount":5,"eol":{"hasEol":true,"count":1},"references":[{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9694","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9694","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34335","label":"secunia.com/advisories/34335","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Not Applicable"]},{"url":"http://secunia.com/advisories/35777","label":"secunia.com/advisories/35777","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Not Applicable"]},{"url":"http://secunia.com/advisories/34350","label":"secunia.com/advisories/34350","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-11.xml","label":"security.gentoo.org/glsa/glsa-200907-11.xml","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"http://cgit.freedesktop.org/gstreamer/gst-plugins-base/commit/?id=566583e87147f774e7fc4c78b5f7e61d427e40a9","label":"cgit.freedesktop.org/gstreamer/gst-plugins-base/commit/?id=566583e87147f774e7fc4c78b5f7e61d427e40a9","hostname":"cgit.freedesktop.org","tags":["X Refsource CONFIRM","Patch","Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2009/03/12/2","label":"openwall.com/lists/oss-security/2009/03/12/2","hostname":"openwall.com","tags":["Mailing List","X Refsource MLIST","Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/34100","label":"www.securityfocus.com/bid/34100","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Patch","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:085","label":"www.mandriva.com/security/advisories?name=MDVSA-2009:085","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA","Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/501712/100/0/threaded","label":"www.securityfocus.com/archive/1/501712/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ","Third Party Advisory","VDB Entry"]},{"url":"http://ocert.org/patches/2008-015/gst-plugins-base-CVE-2009-0586.diff","label":"ocert.org/patches/2008-015/gst-plugins-base-CVE-2009-0586.diff","hostname":"ocert.org","tags":["X Refsource MISC","Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","label":"lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Broken Link","Mailing List","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-735-1","label":"www.ubuntu.com/usn/USN-735-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49274","label":"exchange.xforce.ibmcloud.com/vulnerabilities/49274","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF","Third Party Advisory"]},{"url":"http://www.ocert.org/advisories/ocert-2008-015.html","label":"www.ocert.org/advisories/ocert-2008-015.html","hostname":"www.ocert.org","tags":["X Refsource MISC","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2009:0352","label":"access.redhat.com/errata/RHSA-2009:0352","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=488208","label":"bugzilla.redhat.com/show_bug.cgi?id=488208","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0352.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0352.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-0586","label":"access.redhat.com/security/cve/CVE-2009-0586","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-0586","label":"www.cve.org/CVERecord?id=CVE-2009-0586","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-0586","label":"nvd.nist.gov/vuln/detail/CVE-2009-0586","hostname":"nvd.nist.gov","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2009-03-14T18:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T04:40:04.340Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":31,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T20:06:32.964Z","stale":false,"partial":false}}