--==============15803619=Content-Type: multipart/alternative; boundary504502b194b15ea9046d1774e3

--00504502b194b15ea9046d1774e3
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit

------------------------------------------------------------------------
Pardus Linux Security Advisory 2009-91            security@pardus.org.tr
------------------------------------------------------------------------

      Date: 2009-06-24
  Severity: 3
      Type: Remote
------------------------------------------------------------------------

Summary
======
A vulnerability has been discovered in GStreamer Good  Plug-ins,  which

can be exploited by  malicious  people  to  potentially  compromise  an
application using the library.


Description
==========
The vulnerability is  caused  due  to  an  integer  overflow  error  in

ext/libpng/gstpngdec.c, which can be exploited to  cause  a  heap-based
buffer overflow via a specially crafted PNG file.



Successful exploitation may allow execution of arbitrary code.




Affected packages:

  Pardus 2008:
    gst-plugins-good, all before 0.10.11-16-9


Resolution
=========
There are update(s) for  gst-plugins-good.  You  can  update  them  via
Package Manager or with a single command from console:

    pisi up gst-plugins-good

References
=========
  * http://bugs.pardus.org.tr/show_bug.cgi?id™86
  * http://cgit.freedesktop.org/gstreamer...44bcc44adcef769cbdf7f6453e140058a3adc

  * http://secunia.com/advisories/35205