CVE-2016-9810

The gstdecodechainfreeinternal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a denial of service invalid memory read and crash via an invalid file, which triggers an incorrect unref call...

CVE-2016-9810

The gstdecodechainfreeinternal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a denial of service invalid memory read and crash via an invalid file, which triggers an incorrect unref call...

Design/Logic Flaw

The flxdecodechunks function in gst/flx/gstflxdec.c in GStreamer before 1.10.2 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted FLIC file...

UBUNTU-CVE-2016-9810

The gstdecodechainfreeinternal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a denial of service invalid memory read and crash via an invalid file, which triggers an incorrect unref call...

CVE-2016-9807

The flxdecodechunks function in gst/flx/gstflxdec.c in GStreamer before 1.10.2 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted FLIC file...

CVE-2016-6886

The pstmreverse function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service invalid memory read and crash via a 1 zero value or 2 the key's modulus for the secret key during RSA key exchange...

CVE-2016-6886

The pstmreverse function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service invalid memory read and crash via a 1 zero value or 2 the key's modulus for the secret key during RSA key exchange...

Code injection

The pstmreverse function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service invalid memory read and crash via a 1 zero value or 2 the key's modulus for the secret key during RSA key exchange...

CVE-2016-9807

The flxdecodechunks function in gst/flx/gstflxdec.c in GStreamer before 1.10.2 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted FLIC file...

CVE-2016-9810

The gstdecodechainfreeinternal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a denial of service invalid memory read and crash via an invalid file, which triggers an incorrect unref call...

CVE-2016-9810

The gstdecodechainfreeinternal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a denial of service invalid memory read and crash via an invalid file, which triggers an incorrect unref call...

CVE-2016-9810

The CVE-2016-9810 item applies to GStreamer’s gst-plugins-good flxdex decoder. The affected component is the gst_decode_chain_free_internal function, present in GStreamer versions prior to 1.10.2, where processing an invalid file can trigger an incorrect unref and lead to an invalid memory read, ...

CVE-2016-6886

The CVE-2016-6886 issue affects MatrixSSL prior to 3.8.4, where the pstm_reverse function can be abused during RSA key exchange to trigger an invalid memory read and crash, enabling a remote denial-of-service. The vulnerability is triggered by a zero value or by the key’s modulus for the secret k...

openSUSE Security Update : gstreamer-plugins-good (openSUSE-2017-65)

This update for gstreamer-plugins-good fixes the following security issues : - CVE-2016-9807: Flic decoder invalid read could lead to crash. bsc1013655 - CVE-2016-9634: Flic out-of-bounds write could lead to code execution. bsc1012102 - CVE-2016-9635: Flic out-of-bounds write could lead to code...

Scientific Linux Security Update : gstreamer-plugins-good on SL7.x x86_64 (20170105)

Security Fixes : - Multiple flaws were discovered in GStreamer's FLC/FLI/FLX media file format decoding plug-in. A remote attacker could use these flaws to cause an application using GStreamer to crash or, potentially, execute arbitrary code with the privileges of the user running the application...

gstreamer-plugins-good: Invalid memory read in flx_decode_chunks

An invalid memory read access flaw was found in GStreamer's FLC/FLI/FLX media file format decoding plug-in. A remote attacker could use this flaw to cause an application using GStreamer to crash...

gstreamer-plugins-good: Invalid memory read in flx_decode_chunks

An invalid memory read access flaw was found in GStreamer's FLC/FLI/FLX media file format decoding plug-in. A remote attacker could use this flaw to cause an application using GStreamer to crash...

SUSE SLED12 / SLES12 Security Update : gstreamer-plugins-good (SUSE-SU-2016:3288-1)

This update for gstreamer-plugins-good fixes the following issues : - CVE-2016-9807: flic decoder invalid read could lead to crash bsc1013655 - CVE-2016-9634: flic out-of-bounds write could lead to code execution bsc1012102 - CVE-2016-9635: flic out-of-bounds write could lead to code execution...

Updated gstreamer0.10-plugins-good and gstreamer1.0-plugins-good packages fix security vulnerabilities

Multiple flaws were discovered in GStreamer's FLC/FLI/FLX media file format decoding plug-in. A remote attacker could use these flaws to cause an application using GStreamer to crash or, potentially, execute arbitrary code with the privileges of the user running the application CVE-2016-9634,...

gstreamer security update

CentOS Errata and Security Advisory CESA-2016:2975 An update for gstreamer-plugins-good is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...