CVE-2009-0387: Array index error in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins...

Security readout for executives and security teams

CVE-2009-0387 is a media-file parsing flaw in GStreamer Good Plug-ins. A malformed QuickTime .mov file can crash an application using affected GStreamer versions and may allow code execution. Business risk depends on whether user-supplied media is processed by affected Linux desktop, server, or automation workflows. Exposure is most likely where affected GStreamer Good Plug-ins process untrusted .mov or QuickTime media. Desktop media players, thumbnailers, file preview services, and backend media pipelines may be relevant if they use gst-plugins-good 0.10.9 through 0.10.11. Prioritize remediation where untrusted media is opened automatically or processed at scale. For ordinary desktops, patch through standard Linux vendor updates. Escalate if affected media handling is exposed through customer uploads, email gateways, or content-processing services. Mitigation focus: Identify systems running gst-plugins-good 0.10.9 through 0.10.11.; Apply vendor security updates for GStreamer Good Plug-ins from your distribution.; Prefer a GStreamer release or package newer than the affected range..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.