openSUSE Security Update : gstreamer-plugins-bad (openSUSE-2017-479)

This update for gstreamer-plugins-bad fixes the following issues : Security issues fixed : - CVE-2017-5843: set stream tags to NULL after unrefing bsc1024044. - CVE-2017-5848: rewrite PSM parsing to add bounds checking bsc1024068. This update was imported from the SUSE:SLE-12-SP2:Update update...

SUSE-SU-2017:1041-1 Security update for gstreamer-plugins-base

This update for gstreamer-plugins-base fixes the following security issues: - A crafted AVI file could have caused a floating point exception leading to DoS bsc1024076, CVE-2017-5837, bsc1024079, CVE-2017-5844 - A crafted AVI file could have caused a stack overflow leading to DoS bsc1024047,...

SUSE-SU-2017:1039-1 Security update for gstreamer-plugins-base

This update for gstreamer-plugins-base fixes the following security issues: - A crafted AVI file could have caused a floating point exception leading to DoS bsc1024076, CVE-2017-5837, bsc1024079, CVE-2017-5844 - A crafted AVI file could have caused a stack overflow leading to DoS bsc1024047,...

SUSE SLED12 / SLES12 Security Update : gstreamer-plugins-good (SUSE-SU-2017:1004-1)

This update for gstreamer-plugins-good fixes the following issues : - A crafted aac audio file could have caused an invalid read and thus corruption or denial of service bsc1024014, CVE-2016-10198 - A crafted mp4 file could have caused an invalid read and thus corruption or denial of service...

SUSE SLED12 / SLES12 Security Update : gstreamer-plugins-good (SUSE-SU-2017:1010-1)

This update for gstreamer-plugins-good fixes the following issues : - A crafted aac audio file could have caused an invalid read and thus corruption or denial of service bsc1024014, CVE-2016-10198 - A crafted mp4 file could have caused an invalid read and thus corruption or denial of service...

SUSE-SU-2017:1004-1 Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: - A crafted aac audio file could have caused an invalid read and thus corruption or denial of service bsc1024014, CVE-2016-10198 - A crafted mp4 file could have caused an invalid read and thus corruption or denial of service...

SUSE-SU-2017:1010-1 Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: - A crafted aac audio file could have caused an invalid read and thus corruption or denial of service bsc1024014, CVE-2016-10198 - A crafted mp4 file could have caused an invalid read and thus corruption or denial of service...

SUSE-SU-2017:1012-1 Security update for gstreamer-0_10-plugins-base

This update for gstreamer-010-plugins-base fixes the following issues: - A crafted AVI file could have caused a floating point exception leading to DoS bsc1024076, CVE-2017-5837, bsc1024079, CVE-2017-5844...

SUSE SLED12 / SLES12 Security Update : gstreamer-plugins-bad (SUSE-SU-2017:0962-1)

This update for gstreamer-plugins-bad fixes the following issues: Security issues fixed : - CVE-2017-5843: set stream tags to NULL after unrefing bsc1024044. - CVE-2017-5848: rewrite PSM parsing to add bounds checking bsc1024068. Note that Tenable Network Security has extracted the preceding...

SUSE-SU-2017:0962-1 Security update for gstreamer-plugins-bad

This update for gstreamer-plugins-bad fixes the following issues: Security issues fixed: - CVE-2017-5843: set stream tags to NULL after unrefing bsc1024044. - CVE-2017-5848: rewrite PSM parsing to add bounds checking bsc1024068...

USN-3245-1: GStreamer Good Plugins vulnerabilities

Hanno Böck discovered that GStreamer Good Plugins did not correctly handle certain malformed media files. If a user were tricked into opening a crafted media file with a GStreamer application, an attacker could cause a denial of service via application crash...

openSUSE Security Update : gstreamer-plugins-base (openSUSE-2017-301)

This update for gstreamer-plugins-base fixes the following security issues : - A crafted AVI file could have caused a floating point exception leading to DoS bsc1024076, CVE-2017-5837, bsc1024079, CVE-2017-5844 - A crafted AVI file could have caused a stack overflow leading to DoS bsc1024047,...

openSUSE: Security Advisory for gstreamer-plugins-good (openSUSE-SU-2017:0071-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

GStreamer gst-plugins-base denial of service vulnerability

GStreamer is a set of frameworks for handling streaming media. A denial of service vulnerability exists in GStreamer gst-plugins-base, which allows remote attackers to cause a denial of service floating point exception and crash via a crafted video file...

GStreamer gst-plugins-base denial of service vulnerability (CNVD-2017-01449)

GStreamer is a set of frameworks for handling streaming media. A denial of service vulnerability exists in GStreamer gst-plugins-base, which allows remote attackers to cause a denial of service stack overflow and crash via a nested WAVEFORMATEX vector...

GStreamer gst-plugins-good denial of service vulnerability (CNVD-2017-01451)

GStreamer is a set of frameworks for handling streaming media. A denial-of-service vulnerability in the gstavidemuxparsencdt function in gst/avi/gstavidemux.c in GStreamer gst-plugins-good allows remote attackers to cause a denial of service out-of-bounds heap read...

GStreamer html_context_handle_element function denial of service vulnerability

GStreamer is an open source multimedia framework. GStreamer has a security vulnerability in the gst-plugins-base/gst/subparse/samiparse.c/htmlcontexthandleelement function, which causes a denial of service for remote attackers...

UBUNTU-CVE-2017-5840

The qtdemuxparsesamples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds heap read via vectors involving the current stts index...

openSUSE Security Update : gstreamer-plugins-base (openSUSE-2017-168)

This update for gstreamer-plugins-base fixes the following issues : - CVE-2016-9811: Malicious file could could cause an invalid read leading to crash bsc1013669 This update was imported from the SUSE:SLE-12-SP2:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SUSE-SU-2017:0289-1 Security update for gstreamer-0_10-plugins-base

This update for gstreamer-010-plugins-base fixes the following issue: - CVE-2016-9811: Out of bounds memory read in windowsicontypefind bsc1013669...