[SECURITY] Fedora 24 Update: gstreamer1-plugins-good-1.8.3-2.fc24

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

[SECURITY] Fedora 24 Update: gstreamer1-plugins-bad-free-1.8.3-2.fc24

GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins that aren't tested well enough, or the code is not of good enough quality...

GStreamer FLIC Decoder Buffer Overflow Vulnerability

GStreamer is a multimedia framework for creating streaming applications in the GNOME desktop environment. A buffer overflow vulnerability exists in the GStreamer FLIC decoder function module, which can be exploited by an attacker to execute arbitrary code in the context of an affected application...

Fedora 25 : gstreamer-plugins-bad-free (2016-fdedfc86d0)

Remove insecure nsf plugin 1395126 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

[SECURITY] Fedora 25 Update: gstreamer-plugins-bad-free-0.10.23-34.fc25

GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins that aren't tested well enough, or the code is not of good enough quality...

[SECURITY] Fedora 25 Update: gstreamer1-plugins-good-1.10.1-2.fc25

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

PT-2016-3325

Name of the Vulnerable Software and Affected Versions Gstreamer versions prior to 1.10.3 Description The issue is related to the qtdemux tag add str full function in the gst-plugins-good plugin of the Gstreamer multimedia framework. It involves an out-of-bounds operation in memory, which can be...

PT-2016-3324

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.10.3 Description The issue is related to the gst aac parse sink setcaps function in the gst-plugins-good plugin of the GStreamer multimedia framework. It allows remote attackers to cause a denial of service invali...

Debian DLA-727-1 : gst-plugins-good0.10 security update

Chris Evans discovered that the GStreamer 0.10 plugin used to decode files in the FLIC format allowed execution of arbitrary code. Further details can be found in his advisory at https://scarybeastsecurity.blogspot.de/2016/11/0day-exploit-advancing- exploitati on.html This update removes the...

[SECURITY] [DLA 727-1] gst-plugins-good0.10 security update

Package : gst-plugins-good0.10 Version : 0.10.31-3+nmu1+deb7u1 CVE ID : CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 Chris Evans discovered that the GStreamer 0.10 plugin used to decode files in the FLIC format allowed execution of arbitrary code. Further details can be found in his advisory at...

DLA-727-1 gst-plugins-good0.10 - security update

Bulletin has no description...

PT-2017-10346

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.10.2 gst-plugins-base versions prior to 1.10.2 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds read, via a crafted ico file. This occurs when the G SLICE i...

PT-2017-10347

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.10.2 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds read, via a too small section. This is related to the gst mpegts section new function in the mpegts...

PT-2017-10348

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.10.2 Description The issue allows remote attackers to cause a denial of service, resulting in a crash due to a NULL pointer dereference, via a crafted file. This is related to the parse pat function in the mpegts...

PT-2017-10343

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.10.2 Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds write and crash, via a crafted series of skip and count pairs in the FLIC decoder. Recommendations For...

PT-2017-10345

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.10.2 Description The issue allows remote attackers to cause a denial of service, resulting in an invalid memory read and crash, via an invalid file. This is triggered by an incorrect unref call in the gst decode...

Ubuntu: Security Advisory (USN-3135-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2017-10344

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.10.2 Description The issue is caused by an off-by-one error in the gst h264 parse set caps function, allowing remote attackers to have an unspecified impact via a crafted file. This triggers an out-of-bounds read...

PT-2017-10342

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.10.2 Description The issue allows remote attackers to cause a denial of service, resulting in an invalid memory read and crash, by providing a crafted FLIC file. This is due to a problem in the flx decode chunks...

USN-3135-2: GStreamer Good Plugins vulnerability

USN-3135-1 fixed a vulnerability in GStreamer Good Plugins. The original security fix was incomplete. This update fixes the problem. Original advisory details: Chris Evans discovered that GStreamer Good Plugins did not correctly handle malformed FLC movie files. If a user were tricked into openin...