CVE-2016-9447

A memory corruption flaw was found in GStreamer's Nintendo NSF music file format decoding plug-in. A remote attacker could use this flaw to cause an application using GStreamer to crash or, potentially, execute arbitrary code with the privileges of the user running the application. Mitigation sud...

Debian DLA-712-1 : gst-plugins-bad0.10 security update

CVE-2016-9445 CVE-2016-9446 Chris Evans discovered that the GStreamer plugin to decode VMware screen capture files allowed the execution of arbitrary code. He also found that an initialized buffer may lead into memory disclosure. CVE-2016-9447 Chris Evans discovered that the GStreamer 0.10 plugin...

DLA-712-1 gst-plugins-bad0.10 - security update

Bulletin has no description...

[SECURITY] [DLA 712-1] gst-plugins-bad0.10 security update

Package : gst-plugins-bad0.10 Version : 0.10.23-7.1+deb7u3 CVE ID : CVE-2016-9445 CVE-2016-9446 CVE-2016-9447 CVE-2016-9445 CVE-2016-9446 Chris Evans discovered that the GStreamer plugin to decode VMware screen capture files allowed the execution of arbitrary code. He also found that an initializ...

Debian DSA-3717-1 : gst-plugins-bad1.0, gst-plugins-bad0.10 - security update

Chris Evans discovered that the GStreamer plugin to decode VMware screen capture files allowed the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-3717. The te...

[SECURITY] [DSA 3717-1] gst-plugins-bad1.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3717-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 17, 2016 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3717-1 (gst-plugins-bad1.0 / gst-plugins-bad0.10 - security update)

Chris Evans discovered that the GStreamer plugin to decode VMware screen capture files allowed the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb3717.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3717-1 using nvtgen 1.0 Script version: 1.0 Author:...

PT-2017-10140

Name of the Vulnerable Software and Affected Versions gstreamer affected versions not specified Description The issue is related to an integer overflow in the vmnc decoder, which can be exploited by remote attackers to cause a denial of service crash by providing large width and height values,...

DSA-3717-1 gst-plugins-bad1.0 - security update

Bulletin has no description...

PT-2017-10141

Name of the Vulnerable Software and Affected Versions gstreamer affected versions not specified Description The issue concerns the vmnc decoder in the gstreamer, which fails to initialize the render canvas. This allows remote attackers to obtain sensitive information. An example of exploitation i...

Debian: Security Advisory (DSA-3717-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-3713-1 : gst-plugins-bad0.10 - security update

Chris Evans discovered that the GStreamer 0.10 plugin to decode NES Sound Format files allowed the execution of arbitrary code. Further details can be found in his advisory at http://scarybeastsecurity.blogspot.de/2016/11/0day-exploit-compromisin g-linux-desktop.html. %NASLMINLEVEL 70300 C Tenabl...

[SECURITY] [DSA 3713-1] gst-plugins-bad0.10 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3713-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 15, 2016 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3713-1 (gst-plugins-bad0.10 - security update)

Chris Evans discovered that the GStreamer 0.10 plugin to decode NES Sound Format files allowed the execution of arbitrary code. Further details can be found in his advisory at http://scarybeastsecurity.blogspot.de/2016/11/0day-exploit-compromising-linux-desktop.html . OpenVAS Vulnerability Test...

PT-2017-10142

Name of the Vulnerable Software and Affected Versions gstreamer versions 0.10.x Description The issue concerns a denial of service and potential arbitrary code execution through a crafted NSF music file. This is due to out-of-bounds read or write operations in the ROM mappings of the NSF decoder...

DSA-3713-1 gst-plugins-bad0.10 - security update

Bulletin has no description...

GStreamer: User-assisted execution of arbitrary code

Background GStreamer is an open source multimedia framework. Description A buffer overflow vulnerability has been found in the parsing of H.264 formatted video. Impact A remote attacker could entice a user to open a specially crafted H.264 formatted video using an application linked against...

[SECURITY] Fedora 22 Update: snappy-player-1.0-7.20151010git166a98.fc22

snappy is an open source media player that gathers the power and flexibility of gstreamer inside the comfort of a minimalistic clutter interface...

[SECURITY] Fedora 21 Update: snappy-player-1.0-7.20151010git166a98.fc21

snappy is an open source media player that gathers the power and flexibility of gstreamer inside the comfort of a minimalistic clutter interface...

[SECURITY] Fedora 23 Update: snappy-player-1.0-7.20151010git166a98.fc23

snappy is an open source media player that gathers the power and flexibility of gstreamer inside the comfort of a minimalistic clutter interface...