5827 matches found
USN-3135-2 gst-plugins-good0.10, gst-plugins-good1.0 vulnerability
USN-3135-1 fixed a vulnerability in GStreamer Good Plugins. The original security fix was incomplete. This update fixes the problem. Original advisory details: Chris Evans discovered that GStreamer Good Plugins did not correctly handle malformed FLC movie files. If a user were tricked into openin...
GStreamer Good Plug-ins start_line parameter write buffer overflow vulnerability
GStreamer is a multimedia framework for creating streaming applications in the GNOME desktop environment. A buffer overflow vulnerability exists in GStreamer Good Plug-ins. An attacker could exploit the vulnerability to execute arbitrary code in the context of a user running the affected...
GStreamer Good Plug-ins skip count buffer overflow vulnerability
GStreamer is a multimedia framework for creating streaming applications in the GNOME desktop environment. A buffer overflow vulnerability exists in GStreamer Good Plug-ins. An attacker could exploit the vulnerability to execute arbitrary code in the context of a user running the affected...
PT-2016-7930
Name of the Vulnerable Software and Affected Versions GStreamer Good Plugins affected versions not specified Description The issue arises from the incorrect handling of malformed FLC movie files by GStreamer Good Plugins. If a user is tricked into opening a crafted FLC movie file with a GStreamer...
GStreamer Good Plug-ins write count buffer overflow vulnerability
GStreamer is a multimedia framework for creating streaming applications in the GNOME desktop environment. A buffer overflow vulnerability exists in GStreamer Good Plug-ins. An attacker could exploit the vulnerability to execute arbitrary code in the context of a user running the affected...
The “elegance”of Linux vulnerabilities: rare ways to bypass the ASLR and DEP protection mechanisms-vulnerability warning-the black bar safety net
! The recent foreign researchers published a exp code in the finished patch to the Fedora and other Linux system on the drive-by attacks, in order to install keyloggers, backdoors and other malicious software. This exp is for the GStreamer framework in a memory-corruption vulnerability that...
Ubuntu 14.04 LTS / 16.04 LTS : GStreamer Good Plugins vulnerability (USN-3135-2)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3135-2 advisory. USN-3135-1 fixed a vulnerability in GStreamer Good Plugins. The original security fix was incomplete. This update fixes the problem. Tenable has...
Debian DSA-3723-1 : gst-plugins-good1.0 - security update
Chris Evans discovered that the GStreamer 1.0 plugin used to decode files in the FLIC format allowed execution of arbitrary code. Further details can be found in his advisory at https://scarybeastsecurity.blogspot.de/2016/11/0day-exploit-advancing- exploitation.html %NASLMINLEVEL 70300 C Tenable...
[SECURITY] [DSA 3724-1] gst-plugins-good0.10 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3724-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 24, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3724-1] gst-plugins-good0.10 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3724-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 24, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3723-1] gst-plugins-good1.0 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3723-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 24, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3723-1] gst-plugins-good1.0 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3723-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 24, 2016 https://www.debian.org/security/faq -...
CVE-2016-9635
Multiple flaws were discovered in GStreamer's FLC/FLI/FLX media file format decoding plug-in. A remote attacker could use these flaws to cause an application using GStreamer to crash or, potentially, execute arbitrary code with the privileges of the user running the application. Mitigation This...
CVE-2016-9634
Multiple flaws were discovered in GStreamer's FLC/FLI/FLX media file format decoding plug-in. A remote attacker could use these flaws to cause an application using GStreamer to crash or, potentially, execute arbitrary code with the privileges of the user running the application. Mitigation This...
CVE-2016-9636
Multiple flaws were discovered in GStreamer's FLC/FLI/FLX media file format decoding plug-in. A remote attacker could use these flaws to cause an application using GStreamer to crash or, potentially, execute arbitrary code with the privileges of the user running the application. Mitigation This...
PT-2017-10227
Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.10.2 Description The issue is related to a heap-based buffer overflow in the FLIC decoder. This can be exploited by providing a skip count that exceeds the initialized buffer, potentially allowing remote attackers...
DSA-3724-1 gst-plugins-good0.10 - security update
Bulletin has no description...
PT-2017-10226
Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.10.2 Description The issue is related to a heap-based buffer overflow in the FLIC decoder, specifically in the flx decode delta fli function. This can be exploited by remote attackers to execute arbitrary code or...
Debian Security Advisory DSA 3724-1 (gst-plugins-good0.10 - security update)
Chris Evans discovered that the GStreamer 0.10 plugin used to decode files in the FLIC format allowed execution of arbitrary code. Further details can be found in his advisory at https://scarybeastsecurity.blogspot.de/2016/11/0day-exploit-advancing-exploitation.html This update removes the insecu...