Tobias Klein has reported some vulnerabilities in GStreamer Good Plug-ins, which can potentially be exploited by malicious people to compromise a vulnerable system.

1) A boundary error occurs within the "qtdemux_parse_samples()" function in gst/gtdemux/qtdemux.c when performing QuickTime "ctts" Atom parsing. This can be exploited to cause a heap-based buffer overflow via a specially crafted QuickTime media file.

2) An array indexing error exists in the "qtdemux_parse_samples()" function in gst/gtdemux/qtdemux.c when performing QuickTime "stss" Atom parsing. This can be exploited to corrupt memory via a specially crafted QuickTime media file.

3) A boundary error occurs within the "qtdemux_parse_samples()" function in gst/gtdemux/qtdemux.c when performing QuickTime "stts" Atom parsing. This can be exploited to cause a heap-based buffer overflow via a specially crafted QuickTime media file.

These vulnerabilities are reported in versions prior to 0.10.12.

Solution
Update to version 0.10.12 or later.

Provided and/or discovered by
Tobias Klein

Changelog
Further details available to Secunia VIM customers

Original Advisory
Tobias Klein:
http://trapkit.de/advisories/TKADV2009-003.txt

GStreamer:
http://gstreamer.freedesktop.org/releases/gst-plugins-good/0.10.12.html

Deep Links
Links available to Secunia VIM customers