5878 matches found
CVE-2016-9809
Off-by-one error in the gsth264parsesetcaps function in GStreamer before 1.10.2 allows remote attackers to have unspecified impact via a crafted file, which triggers an out-of-bounds read...
CVE-2016-9812
The gstmpegtssectionnew function in the mpegts decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service out-of-bounds read via a too small section...
Code injection
The gstdecodechainfreeinternal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a denial of service invalid memory read and crash via an invalid file, which triggers an incorrect unref call...
Out-of-bounds
The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service out-of-bounds write and crash via a crafted series of skip and count pairs...
UBUNTU-CVE-2016-9810
The gstdecodechainfreeinternal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a denial of service invalid memory read and crash via an invalid file, which triggers an incorrect unref call...
UBUNTU-CVE-2016-9813
The parsepat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file...
UBUNTU-CVE-2016-9809
Off-by-one error in the gsth264parsesetcaps function in GStreamer before 1.10.2 allows remote attackers to have unspecified impact via a crafted file, which triggers an out-of-bounds read...
Design/Logic Flaw
The flxdecodechunks function in gst/flx/gstflxdec.c in GStreamer before 1.10.2 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted FLIC file...
Out-of-bounds
Off-by-one error in the gsth264parsesetcaps function in GStreamer before 1.10.2 allows remote attackers to have unspecified impact via a crafted file, which triggers an out-of-bounds read...
Null pointer dereference
The parsepat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file...
CVE-2016-9810
The gstdecodechainfreeinternal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a denial of service invalid memory read and crash via an invalid file, which triggers an incorrect unref call...
Out-of-bounds
The windowsicontypefind function in gst-plugins-base in GStreamer before 1.10.2, when GSLICE is set to always-malloc, allows remote attackers to cause a denial of service out-of-bounds read via a crafted ico file...
DEBIAN-CVE-2016-9807
The flxdecodechunks function in gst/flx/gstflxdec.c in GStreamer before 1.10.2 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted FLIC file...
CVE-2016-9807
The flxdecodechunks function in gst/flx/gstflxdec.c in GStreamer before 1.10.2 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted FLIC file...
UBUNTU-CVE-2016-9807
The flxdecodechunks function in gst/flx/gstflxdec.c in GStreamer before 1.10.2 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted FLIC file...
CVE-2016-9813
The parsepat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file...
CVE-2016-9812
The gstmpegtssectionnew function in the mpegts decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service out-of-bounds read via a too small section...
CVE-2016-9810
The CVE-2016-9810 item applies to GStreamer’s gst-plugins-good flxdex decoder. The affected component is the gst_decode_chain_free_internal function, present in GStreamer versions prior to 1.10.2, where processing an invalid file can trigger an incorrect unref and lead to an invalid memory read, ...
