7699 matches found
Out-of-bounds
The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service out-of-bounds read or write and possibly execute arbitrary code via a crafted NSF music file...
CVE-2016-9446
The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1 frame vmnc movie that does not draw to the allocated render canvas...
UBUNTU-CVE-2016-9446
The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1 frame vmnc movie that does not draw to the allocated render canvas...
CVE-2016-9445
Integer overflow in the vmnc decoder in the gstreamer allows remote attackers to cause a denial of service crash via large width and height values, which triggers a buffer overflow...
CVE-2016-9447
CVE-2016-9447 affects the GStreamer 0.10.x NSF decoder: a crafted NSF music file can trigger an out-of-bounds read/write, leading to denial of service and possibly arbitrary code execution. The connected documents confirm the affected component and impact but do not provide a remediation or patch...
CVE-2016-9445
CVE-2016-9445 affects the GStreamer vmnc decoder in the gst-plugins-bad set. The root cause is an integer overflow in the vmncdec.c allocation (width × height × depth), leading to a heap-based buffer overflow. This can allow a remote attacker to crash an affected application, and several sources/...
CVE-2016-9446
The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1 frame vmnc movie that does not draw to the allocated render canvas...
CVE-2016-9446
CVE-2016-9446 affects the GStreamer vmnc decoder. The vmnc decoder does not initialize the render canvas, enabling remote attackers to obtain sensitive information by thumbnailing a 1-frame vmnc movie that does not draw to the render canvas. Affected component: gstreamer vmnc decoding path. The d...
Adobe Acrobat Reader DC jpeg decoder Remote Code Execution Vulnerability
Summary A use of uninitialized memory vulnerability exists in JPEG image file format decoding code of Adobe Acrobat Reader which ultimately leads to a heap-based buffer overflow which can be abused to achieve remote code execution. A specially crafted PDF file with an embedded JPEG can trigger th...
GStreamer Buffer Overflow Vulnerability
GStreamer is a set of frameworks for handling streaming media. A buffer overflow vulnerability exists in the FLIC decoder in versions of GStreamer prior to 1.10.2. A remote attacker could exploit this vulnerability to cause a denial of service out-of-bounds read and crash...
CVE-2016-9808
The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service out-of-bounds write and crash via a crafted series of skip and count pairs...
ALPINE-CVE-2016-9808
The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service out-of-bounds write and crash via a crafted series of skip and count pairs...
DEBIAN-CVE-2016-9810
The gstdecodechainfreeinternal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a denial of service invalid memory read and crash via an invalid file, which triggers an incorrect unref call...
DEBIAN-CVE-2016-9812
The gstmpegtssectionnew function in the mpegts decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service out-of-bounds read via a too small section...
CVE-2016-9810
The gstdecodechainfreeinternal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a denial of service invalid memory read and crash via an invalid file, which triggers an incorrect unref call...
CVE-2016-9808
The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service out-of-bounds write and crash via a crafted series of skip and count pairs...
DEBIAN-CVE-2016-9808
The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service out-of-bounds write and crash via a crafted series of skip and count pairs...
CVE-2016-9808
The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service out-of-bounds write and crash via a crafted series of skip and count pairs...
CVE-2016-9810
The gstdecodechainfreeinternal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a denial of service invalid memory read and crash via an invalid file, which triggers an incorrect unref call...