GStreamer Bad Plug-ins Denial of Service Vulnerability (CNVD-2017-00121)

GStreamer is a set of frameworks for handling streaming media.BadPlug-ins is a decoding component. A denial of service vulnerability exists in GStreamer BadPlug-ins. An attacker can exploit this vulnerability to cause a denial of service...

SUSE SLED12 / SLES12 Security Update : gstreamer-plugins-bad (SUSE-SU-2016:3296-1)

This update for gstreamer-plugins-bad fixes the following security issues, which would allow attackers able to submit media files for indexing to cause code execution or crashes : - Check an integer overflow CVE-2016-9445 and initialize a buffer CVE-2016-9446 in vmncdec. bsc1010829 - CVE-2016-980...

SUSE SLED12 / SLES12 Security Update : gstreamer-plugins-bad (SUSE-SU-2016:3297-1)

This update for gstreamer-plugins-bad fixes the following issues : - CVE-2016-9809: Malicious mkv/h264 file could cause an off by one out of bounds read and lead to crash bsc1013659 - CVE-2016-9812: Malicious mpeg file could cause invalid a NULL pointer access and lead to crash bsc1013678 -...

GStreamer Bad Plug-ins Denial of Service Vulnerability

GStreamer is a set of frameworks for handling streaming media.Bad Plug-ins is a decoding component. A denial of service vulnerability exists in GStreamer Bad Plug-ins. An attacker can exploit this vulnerability to cause a denial of service condition...

SapLPD 7.40 - Denial of Service

SapLPD 7.40 - Denial of Service Exploit Title: SAPlpd 7.40 Denial of Service Date: 2016-12-28 Exploit Author: Peter Baris Exploit code: http://saptech-erp.com.au/resources/saplpddos.zip Version: 7.40 all patch levels as a part of SAPGui 7.40 Tested on: Windows Server 2008 R2 x64, Windows 7 Pro x6...

SapLPD 7.40 - Denial of Service

Exploit Title: SAPlpd 7.40 Denial of Service Date: 2016-12-28 Exploit Author: Peter Baris Exploit code: http://saptech-erp.com.au/resources/saplpddos.zip Version: 7.40 all patch levels as a part of SAPGui 7.40 Tested on: Windows Server 2008 R2 x64, Windows 7 Pro x64 import socket Opcodes 03h and...

Oracle Linux 6 : gstreamer-plugins-bad-free (ELSA-2016-2974)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2974 advisory. 0.10.19-5 - vmncdec: Sanity-check width/height before using it Resolves: rhbz1400820 0.10.19-4 - Remove insecure NSF decoder Resolves: rhbz1400820...

CentOS 6 : gstreamer-plugins-bad-free (CESA-2016:2974)

An update for gstreamer-plugins-bad-free is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CentOS Update for gstreamer-plugins-bad-free CESA-2016:2974 centos6

Check the version of gstreamer-plugins-bad-free SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

gstreamer security update

CentOS Errata and Security Advisory CESA-2016:2974 An update for gstreamer-plugins-bad-free is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives ...

gstreamer-plugins-bad-free security update

0.10.19-5 - vmncdec: Sanity-check width/height before using it Resolves: rhbz1400820 0.10.19-4 - Remove insecure NSF decoder Resolves: rhbz1400820...

Scientific Linux Security Update : gstreamer-plugins-bad-free on SL6.x i386/x86_64 (20161221)

Security Fixes : - An integer overflow flaw, leading to a heap-based buffer overflow, was found in GStreamer's VMware VMnc video file format decoding plug-in. A remote attacker could use this flaw to cause an application using GStreamer to crash or, potentially, execute arbitrary code with the...

RHEL 6 : gstreamer-plugins-bad-free (RHSA-2016:2974)

An update for gstreamer-plugins-bad-free is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Fedora 24 : gstreamer-plugins-bad-free (2016-a3bc78de2b)

vmncdec: Sanity-check width/height before using it ---- Remove insecure nsf plugin 1395126 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possibl...

Fedora Update for gstreamer-plugins-bad-free FEDORA-2016-a3bc78de2b

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : gstreamer-plugins-bad (openSUSE-2016-1483)

This update for gstreamer-plugins-bad fixes the following issues : - Maliciously crafted VMnc VMware video streams typically contained in .avi files could cause code execution during decoding or information leaks due to an uninitialized buffer CVE-2016-9445, CVE-2016-9446, boo1010829. %NASLMINLEV...

openSUSE: Security Advisory for gstreamer-plugins-bad (openSUSE-SU-2016:3158-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for gstreamer-0_10-plugins-bad (openSUSE-SU-2016:3147-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for gstreamer-plugins-bad (important)

This update for gstreamer-plugins-bad fixes the following issues: - Maliciously crafted VMnc VMware video streams typically contained in .avi files could cause code execution during decoding or information leaks due to an unitialized buffer CVE-2016-9445, CVE-2016-9446, boo1010829...

openSUSE Security Update : gstreamer-0_10-plugins-bad (openSUSE-2016-1481)

This update for gstreamer-010-plugins-bad fixes the following issues : - Maliciously crafted VMnc files VMware video format could lead to crashes CVE-2016-9445, CVE-2016-9446, boo1010829. - Maliciously crafted NSF files NES sound format could lead to arbitrary code execution CESA-2016-0001,...