Buffer overflow parsing H.264 video with Linux Gstreamer — Mozilla

Security researcher Aki Helin used the Address Sanitizer tool to find a buffer overflow during video playback on Linux systems. This was due to a problem in older versions of the Gstreamer plugin during the parsing of H.264 formatted video. This issue could be used to induce a possibly exploitabl...

mozilla -- multiple vulnerabilities

The Mozilla Project reports: MFSA-2015-46 Miscellaneous memory safety hazards rv:38.0 / rv:31.7 MFSA-2015-47 Buffer overflow parsing H.264 video with Linux Gstreamer MFSA-2015-48 Buffer overflow with SVG content and CSS MFSA-2015-49 Referrer policy ignored when links opened by middle-click and...

MGASA-2015-0188 Updated gstreamer0.10-plugins-bad packages fix security vulnerabilities

Updated gstreamer0.10-plugins-bad packages fix security vulnerability: Aki Helin discovered a buffer overflow in the GStreamer plugin for MP4 playback, which could lead in the execution of arbitrary code CVE-2015-0797...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the gstreamer0.10-plugins-good-dbg package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Data Compromise

Multiple vulnerabilities exist in the gstreamer0.10-plugins-good-doc package for the Debian GNU/Linux operating system. Exploitation of these vulnerabilities may lead to violations of the confidentiality, integrity, and accessibility of protected information. Vulnerabilities can be exploited...

Red Hat Enterprise Linux Data Compromise

The vulnerability of the phonon-backend-gstreamer-4.6.2 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the gstreamer0.10-plugins-bad package of the Debian GNU/Linux operating system may lead to violations of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the gstreamer0.10-plugins-bad-doc package for the Debian GNU/Linux operating system may lead to violations of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the gstreamer0.10-sdl package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the gstreamer0.10-plugins-good package of the Debian GNU/Linux operating system may lead to violations of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Data Compromise

The gstreamer0.10-plugins-bad-dbg package on the Debian GNU/Linux operating system has multiple vulnerabilities. Exploiting these vulnerabilities may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

SUSE-SU-2015:0921-1 Security update for gstreamer-0_10-plugins-bad

gstreamer-010-plugins-bad was updated to fix a security issue, a buffer overflow in mp4 parsing bnc927559 CVE-2015-0797. Security Issues: CVE-2015-0797...

SUSE-SU-2015:0942-1 Security update for gstreamer-0_10-plugins-bad

gstreamer-010-plugins-bad was updated to fix a security issue, a buffer overflow in mp4 parsing bnc927559 CVE-2015-0797...

Debian DSA-3225-1 : gst-plugins-bad0.10 - security update

Aki Helin discovered a buffer overflow in the GStreamer plugin for MP4 playback, which could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-3225...

[SECURITY] [DSA 3225-1] gst-plugins-bad0.10 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3225-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 15, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3225-1] gst-plugins-bad0.10 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3225-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 15, 2015 http://www.debian.org/security/faq -...

DSA-3225-1 gst-plugins-bad0.10 - security update

Bulletin has no description...

PT-2015-4882 · Mozilla +4 · Firefox +6

Name of the Vulnerable Software and Affected Versions: GStreamer versions prior to 1.4.5 Mozilla Firefox versions prior to 38.0 Firefox ESR 31.x versions prior to 31.7 Thunderbird versions prior to 31.7 Description: The issue allows remote attackers to cause a denial of service buffer over-read a...

Debian Security Advisory DSA 3225-1 (gst-plugins-bad0.10 - security update)

Aki Helin discovered a buffer overflow in the GStreamer plugin for MP4 playback, which could lead to the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb3225.nasl 8008 2017-12-06 10:53:07Z teissa $ Auto-generated from advisory DSA 3225-1 using nvtgen 1.0 Script version: 1.0 Author...

Debian: Security Advisory (DSA-3225-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...