Lucene search

K
osvGoogleOSV:USN-6269-1
HistoryAug 02, 2023 - 4:23 p.m.

gst-plugins-good1.0 vulnerability

2023-08-0216:23:42
Google
osv.dev
12
gstreamer good plugins
flac
image tags
vulnerability
denial of service
arbitrary code

CVSS3

7.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

16.2%

It was discovered that GStreamer Good Plugins incorrectly handled certain
FLAC image tags. A remote attacker could use this issue to cause GStreamer
Good Plugins to crash, resulting in a denial of service, or possibly
execute arbitrary code. (CVE-2023-37327)

CVSS3

7.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

16.2%