PT-2017-10141

Name of the Vulnerable Software and Affected Versions gstreamer affected versions not specified Description The issue concerns the vmnc decoder in the gstreamer, which fails to initialize the render canvas. This allows remote attackers to obtain sensitive information. An example of exploitation i...

PT-2017-10140

Name of the Vulnerable Software and Affected Versions gstreamer affected versions not specified Description The issue is related to an integer overflow in the vmnc decoder, which can be exploited by remote attackers to cause a denial of service crash by providing large width and height values,...

DSA-3717-1 gst-plugins-bad1.0 - security update

Bulletin has no description...

Debian Security Advisory DSA 3717-1 (gst-plugins-bad1.0 / gst-plugins-bad0.10 - security update)

Chris Evans discovered that the GStreamer plugin to decode VMware screen capture files allowed the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb3717.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3717-1 using nvtgen 1.0 Script version: 1.0 Author:...

Debian DSA-3713-1 : gst-plugins-bad0.10 - security update

Chris Evans discovered that the GStreamer 0.10 plugin to decode NES Sound Format files allowed the execution of arbitrary code. Further details can be found in his advisory at http://scarybeastsecurity.blogspot.de/2016/11/0day-exploit-compromisin g-linux-desktop.html. %NASLMINLEVEL 70300 C Tenabl...

Debian: Security Advisory (DSA-3717-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 3713-1] gst-plugins-bad0.10 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3713-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 15, 2016 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3713-1 (gst-plugins-bad0.10 - security update)

Chris Evans discovered that the GStreamer 0.10 plugin to decode NES Sound Format files allowed the execution of arbitrary code. Further details can be found in his advisory at http://scarybeastsecurity.blogspot.de/2016/11/0day-exploit-compromising-linux-desktop.html . OpenVAS Vulnerability Test...

PT-2017-10142

Name of the Vulnerable Software and Affected Versions gstreamer versions 0.10.x Description The issue concerns a denial of service and potential arbitrary code execution through a crafted NSF music file. This is due to out-of-bounds read or write operations in the ROM mappings of the NSF decoder...

DSA-3713-1 gst-plugins-bad0.10 - security update

Bulletin has no description...

GStreamer: User-assisted execution of arbitrary code

Background GStreamer is an open source multimedia framework. Description A buffer overflow vulnerability has been found in the parsing of H.264 formatted video. Impact A remote attacker could entice a user to open a specially crafted H.264 formatted video using an application linked against...

[SECURITY] Fedora 22 Update: snappy-player-1.0-7.20151010git166a98.fc22

snappy is an open source media player that gathers the power and flexibility of gstreamer inside the comfort of a minimalistic clutter interface...

[SECURITY] Fedora 21 Update: snappy-player-1.0-7.20151010git166a98.fc21

snappy is an open source media player that gathers the power and flexibility of gstreamer inside the comfort of a minimalistic clutter interface...

[SECURITY] Fedora 23 Update: snappy-player-1.0-7.20151010git166a98.fc23

snappy is an open source media player that gathers the power and flexibility of gstreamer inside the comfort of a minimalistic clutter interface...

SUSE: Security Advisory for gstreamer-0_10-plugins-bad (SUSE-SU-2015:0921-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2009-0271)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2009-1123)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2009-0352)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : MozillaFirefox (openSUSE-2015-565)

MozillaFirefox was updated to version 40.0.3 to fix two security issues and several bugs. Changes in MozillaFirefox : - update to Firefox 40.0.3 bnc943550 - Disable the asynchronous plugin initialization bmo1198590 - Fix a segmentation fault in the GStreamer support bmo1145230 - Fix a regression...

SUSE SLED12 Security Update : gstreamer-0_10-plugins-bad (SUSE-SU-2015:0942-1)

gstreamer-010-plugins-bad was updated to fix a security issue, a buffer overflow in mp4 parsing bnc927559 CVE-2015-0797. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and form...