PT-2017-10228

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.10.2 Description The issue is related to a heap-based buffer overflow in the FLIC decoder. This can be exploited by providing a write count that exceeds the initialized buffer, potentially allowing remote attacker...

Debian Security Advisory DSA 3723-1 (gst-plugins-good1.0 - security update)

Chris Evans discovered that the GStreamer 1.0 plugin used to decode files in the FLIC format allowed execution of arbitrary code. Further details can be found in his advisory at https://scarybeastsecurity.blogspot.de/2016/11/0day-exploit-advancing-exploitation.html OpenVAS Vulnerability Test $Id:...

GStreamer Bad Plug-ins Integer Overflow Vulnerability

GStreamer is a set of frameworks for handling streaming media.Bad Plug-ins is a decoding component. An integer overflow vulnerability exists in GStreamer Bad Plug-ins. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service...

GStreamer Bad Plug-ins Information Disclosure Vulnerability

GStreamer is a set of frameworks for handling streaming media.Bad Plug-ins is a decoding component. A remote information disclosure vulnerability exists in GStreamer Bad Plug-ins. An attacker can exploit this vulnerability to obtain sensitive information...

GStreamer Bad Plug-ins Buffer Overflow Vulnerability

GStreamer is a set of frameworks for handling streaming media.Bad Plug-ins is a decoding component. GStreamer Bad Plug-ins suffers from a buffer overflow vulnerability due to the program failing to adequately copy user-supplied data into a buffer. An attacker can exploit this vulnerability to...

Debian: Security Advisory (DSA-3724-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-3135-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS : GStreamer Good Plugins vulnerability (USN-3135-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3135-1 advisory. Chris Evans discovered that GStreamer Good Plugins did not correctly handle malformed FLC movie files. If a user were tricked into opening a crafted F...

USN-3135-1: GStreamer Good Plugins vulnerability

Chris Evans discovered that GStreamer Good Plugins did not correctly handle malformed FLC movie files. If a user were tricked into opening a crafted FLC movie file with a GStreamer application, an attacker could cause a denial of service via application crash, or execute arbitrary code with the...

USN-3135-1 gst-plugins-good0.10, gst-plugins-good1.0 vulnerability

Chris Evans discovered that GStreamer Good Plugins did not correctly handle malformed FLC movie files. If a user were tricked into opening a crafted FLC movie file with a GStreamer application, an attacker could cause a denial of service via application crash, or execute arbitrary code with the...

PT-2016-7929

Name of the Vulnerable Software and Affected Versions GStreamer Good Plugins affected versions not specified Description The issue arises from the incorrect handling of malformed FLC movie files by GStreamer Good Plugins. If a user is tricked into opening a crafted FLC movie file with a GStreamer...

Ubuntu system actually exists Nintendo red and white game machine vulnerability-vulnerability warning-the black bar safety net

Recently security researchers Evans in the Ubuntu system found a very interesting vulnerability, this vulnerability also with Nintendo the year of the 8-bit consoles（NES, or FC. Evans said that in Ubuntu 12.04.5 version of the multimedia framework in the presence of a vulnerability, the...

CVE-2016-9446

The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1 frame vmnc movie that does not draw to the allocated render canvas...

CVE-2016-9445

An integer overflow flaw, leading to a heap-based buffer overflow, was found in GStreamer's VMware VMnc video file format decoding plug-in. A remote attacker could use this flaw to cause an application using GStreamer to crash or, potentially, execute arbitrary code with the privileges of the use...

CVE-2016-9447

A memory corruption flaw was found in GStreamer's Nintendo NSF music file format decoding plug-in. A remote attacker could use this flaw to cause an application using GStreamer to crash or, potentially, execute arbitrary code with the privileges of the user running the application. Mitigation sud...

Debian DLA-712-1 : gst-plugins-bad0.10 security update

CVE-2016-9445 CVE-2016-9446 Chris Evans discovered that the GStreamer plugin to decode VMware screen capture files allowed the execution of arbitrary code. He also found that an initialized buffer may lead into memory disclosure. CVE-2016-9447 Chris Evans discovered that the GStreamer 0.10 plugin...

DLA-712-1 gst-plugins-bad0.10 - security update

Bulletin has no description...

[SECURITY] [DLA 712-1] gst-plugins-bad0.10 security update

Package : gst-plugins-bad0.10 Version : 0.10.23-7.1+deb7u3 CVE ID : CVE-2016-9445 CVE-2016-9446 CVE-2016-9447 CVE-2016-9445 CVE-2016-9446 Chris Evans discovered that the GStreamer plugin to decode VMware screen capture files allowed the execution of arbitrary code. He also found that an initializ...

Debian DSA-3717-1 : gst-plugins-bad1.0, gst-plugins-bad0.10 - security update

Chris Evans discovered that the GStreamer plugin to decode VMware screen capture files allowed the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-3717. The te...

[SECURITY] [DSA 3717-1] gst-plugins-bad1.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3717-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 17, 2016 https://www.debian.org/security/faq -...