CVE-2009-0397: Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good...

Security readout for executives and security teams

CVE-2009-0397 is a memory corruption flaw in GStreamer media parsing. A malicious QuickTime .mov file could crash software or possibly run code when processed by affected GStreamer plug-ins. Business urgency depends on whether affected systems still parse untrusted media files. Exposure is most likely on legacy Linux or appliance environments that still include affected GStreamer plug-ins and process QuickTime .mov files from users, email, web downloads, shared storage, or automated media pipelines. Prioritize remediation where legacy systems process untrusted media. For normal managed desktops with current vendor packages, urgency is lower but verification is still warranted because media parsers are common transitive dependencies. Mitigation focus: Update affected GStreamer packages through the operating system vendor advisory channel.; Upgrade gst-plugins-good beyond the affected 0.10.9 through 0.10.11 range.; Check vendor guidance for any platform-specific backported fixes..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.