CVE-2016-9446

🗓️ 23 Jan 2017 21:59:03Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 15 Views

The vmnc decoder in gstreamer exposes sensitive information to remote attacker

Reporter	Title	Published	Views	Family All 66
ArchLinux	[ASA-201701-3] gst-plugins-bad: multiple issues	2 Jan 201700:00	–	archlinux
Tenable Nessus	CentOS 7 : clutter-gst2 / gnome-video-effects / gstreamer-plugins-bad-free / etcgstreamer1 / etc (CESA-2017:2060)	25 Aug 201700:00	–	nessus
Tenable Nessus	Debian DLA-712-1 : gst-plugins-bad0.10 security update	21 Nov 201600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP1 : gstreamer (EulerOS-SA-2017-1205)	11 Sep 201700:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : gstreamer (EulerOS-SA-2017-1206)	11 Sep 201700:00	–	nessus
Tenable Nessus	GLSA-201705-10 : GStreamer plug-ins: User-assisted execution of arbitrary code	18 May 201700:00	–	nessus
Tenable Nessus	MiracleLinux 7 : GStreamer (AXSA:2017-2179:01)	16 Jan 202600:00	–	nessus
Tenable Nessus	openSUSE Security Update : gstreamer-0_10-plugins-bad (openSUSE-2016-1481)	14 Dec 201600:00	–	nessus
Tenable Nessus	openSUSE Security Update : gstreamer-plugins-bad (openSUSE-2016-1483)	16 Dec 201600:00	–	nessus
Tenable Nessus	openSUSE Security Update : gstreamer-plugins-bad (openSUSE-2017-63)	10 Jan 201700:00	–	nessus

NVD

Node

gstreamer gstreamerRange<1.11.1

Node

redhat enterprise_linux_desktopMatch7.0

OR

redhat enterprise_linux_eusMatch7.4

OR

redhat enterprise_linux_eusMatch7.5

OR

redhat enterprise_linux_eusMatch7.6

OR

redhat enterprise_linux_eusMatch7.7

OR

redhat enterprise_linux_serverMatch7.0

OR

redhat enterprise_linux_server_ausMatch7.4

OR

redhat enterprise_linux_server_ausMatch7.6

OR

redhat enterprise_linux_server_ausMatch7.7

OR

redhat enterprise_linux_server_tusMatch7.6

OR

redhat enterprise_linux_server_tusMatch7.7

OR

redhat enterprise_linux_workstationMatch7.0

Node

fedoraproject fedoraMatch35

Source	Link
bugzilla	www.bugzilla.gnome.org/show_bug.cgi
cgit	www.cgit.freedesktop.org/gstreamer/gst-plugins-bad/commit/gst/vmnc/vmncdec.c
openwall	www.openwall.com/lists/oss-security/2016/11/18/12
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UM7IXFGHV66KNWGWG6ZBDNKXD2UJL2VQ/
securityfocus	www.securityfocus.com/bid/94423
scarybeastsecurity	www.scarybeastsecurity.blogspot.de/2016/11/0day-poc-risky-design-decisions-in.html
openwall	www.openwall.com/lists/oss-security/2016/11/18/13
security	www.security.gentoo.org/glsa/201705-10
access	www.access.redhat.com/errata/RHSA-2017:2060

13 May 2026 00:24Current

7.2High risk

Vulners AI Score7.2

CVSS 25

CVSS 3.17.5

EPSS0.01283

vmnc decoder gstreamer sensitive information remote attackers