gstreamer-plugins-bad-free: Integer overflow when allocating render buffer in VMnc decoder

An integer overflow flaw, leading to a heap-based buffer overflow, was found in GStreamer's VMware VMnc video file format decoding plug-in. A remote attacker could use this flaw to cause an application using GStreamer to crash or, potentially, execute arbitrary code with the privileges of the use...

gstreamer-plugins-bad-free security update

0.10.19-5 - vmncdec: Sanity-check width/height before using it Resolves: rhbz1400820 0.10.19-4 - Remove insecure NSF decoder Resolves: rhbz1400820...

Fedora 24 : gstreamer1-plugins-good (2016-3a45d79132)

Add fix for gstreamer FLIC decoder vulnerability Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

CVE-2016-9810

The gstdecodechainfreeinternal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a denial of service invalid memory read and crash via an invalid file, which triggers an incorrect unref call...

GStreamer FLIC Decoder Buffer Overflow Vulnerability

GStreamer is a multimedia framework for creating streaming applications in the GNOME desktop environment. A buffer overflow vulnerability exists in the GStreamer FLIC decoder function module, which can be exploited by an attacker to execute arbitrary code in the context of an affected application...

Fedora 25 : gstreamer1-plugins-good (2016-c883d07fba)

Add fix for gstreamer FLIC decoder vulnerability Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

openSUSE Security Update : ffmpeg (openSUSE-2016-1365)

This update to ffmpeg 3.2 fixes the following issues : - CVE-2016-5199: Heap corruption in FFmpeg boo1009892 FFmpeg was updated to version 3.2, incorporating the following upstream improvements : - SDL2 output device and ffplay support - SDL1 output device and SDL1 support removed - New: libopenm...

PT-2017-10345

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.10.2 Description The issue allows remote attackers to cause a denial of service, resulting in an invalid memory read and crash, via an invalid file. This is triggered by an incorrect unref call in the gst decode...

PT-2017-10347

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.10.2 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds read, via a too small section. This is related to the gst mpegts section new function in the mpegts...

PT-2017-10343

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.10.2 Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds write and crash, via a crafted series of skip and count pairs in the FLIC decoder. Recommendations For...

PT-2017-10228

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.10.2 Description The issue is related to a heap-based buffer overflow in the FLIC decoder. This can be exploited by providing a write count that exceeds the initialized buffer, potentially allowing remote attacker...

PT-2017-10227

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.10.2 Description The issue is related to a heap-based buffer overflow in the FLIC decoder. This can be exploited by providing a skip count that exceeds the initialized buffer, potentially allowing remote attackers...

PT-2017-10226

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.10.2 Description The issue is related to a heap-based buffer overflow in the FLIC decoder, specifically in the flx decode delta fli function. This can be exploited by remote attackers to execute arbitrary code or...

Ubuntu system actually exists Nintendo red and white game machine vulnerability-vulnerability warning-the black bar safety net

Recently security researchers Evans in the Ubuntu system found a very interesting vulnerability, this vulnerability also with Nintendo the year of the 8-bit consoles（NES, or FC. Evans said that in Ubuntu 12.04.5 version of the multimedia framework in the presence of a vulnerability, the...

CVE-2016-9446

The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1 frame vmnc movie that does not draw to the allocated render canvas...

PT-2017-10141

Name of the Vulnerable Software and Affected Versions gstreamer affected versions not specified Description The issue concerns the vmnc decoder in the gstreamer, which fails to initialize the render canvas. This allows remote attackers to obtain sensitive information. An example of exploitation i...

PT-2017-10140

Name of the Vulnerable Software and Affected Versions gstreamer affected versions not specified Description The issue is related to an integer overflow in the vmnc decoder, which can be exploited by remote attackers to cause a denial of service crash by providing large width and height values,...

PT-2017-10142

Name of the Vulnerable Software and Affected Versions gstreamer versions 0.10.x Description The issue concerns a denial of service and potential arbitrary code execution through a crafted NSF music file. This is due to out-of-bounds read or write operations in the ROM mappings of the NSF decoder...

Komfy Switch with Camera DKZ-201S/W - Wifi Password Disclosure Exploit

Exploit for hardware platform in category remote exploits !/usr/bin/python Exploit Title: Komfy Switch with Camera Wifi Password Disclosure via Bluetooth BLE Date: Oct 13, 2016 Exploit Author: Jason Doyle @jasondoyle Vendor Homepage:...

JasPer Null Pointer Backreference Vulnerability

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. JasPer bmpdec.c:394:5 contains a null pointer back-reference vulnerability that can be exploited by an attacker to crash an application and deny service to a legitimate user...