Lucene search

K
redosRedosROS-20240806-09
HistoryAug 06, 2024 - 12:00 a.m.

ROS-20240806-09

2024-08-0600:00:00
redos.red-soft.ru
8
gstreamer
framework
vulnerability
stacked buffer overflow
integer overflow
mxf file parser
remote code execution
crafted files
multimedia
arbitrary code

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

Low

Gstreamer multimedia framework vulnerability is related to stacked buffer overflow. Exploitation
The vulnerability could allow a remote attacker to execute arbitrary code using specially crafted H265 encoded files.
specially crafted H265 encoded files

Gstreamer multimedia framework vulnerability is related to integer overflow. Exploitation
exploitation of the vulnerability could allow a remote attacker to execute arbitrary code using specially crafted MXF files.
specially generated MXF files

Vulnerability in the MXF File Parser component of the Gstreamer multimedia framework is related to integer overflow.
overflow. Exploitation of the vulnerability could allow an attacker acting remotely to execute
arbitrary code by loading a specially generated MFX video file.

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64gstreamer1-plugins-bad-free< 1.16.3-2UNKNOWN

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

Low