[ASA-201702-5] gst-plugins-bad: multiple issues

Arch Linux Security Advisory ASA-201702-5 ========================================= Severity: Critical Date : 2017-02-03 CVE-ID : CVE-2017-5843 CVE-2017-5848 Package : gst-plugins-bad Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-165 Summary ======= The package...

CVE-2016-9810

The gstdecodechainfreeinternal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a denial of service invalid memory read and crash via an invalid file, which triggers an incorrect unref call...

CVE-2016-9810

The gstdecodechainfreeinternal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a denial of service invalid memory read and crash via an invalid file, which triggers an incorrect unref call...

DEBIAN-CVE-2016-9811

The windowsicontypefind function in gst-plugins-base in GStreamer before 1.10.2, when GSLICE is set to always-malloc, allows remote attackers to cause a denial of service out-of-bounds read via a crafted ico file...

ALPINE-CVE-2016-9809

Off-by-one error in the gsth264parsesetcaps function in GStreamer before 1.10.2 allows remote attackers to have unspecified impact via a crafted file, which triggers an out-of-bounds read...

UBUNTU-CVE-2016-9810

The gstdecodechainfreeinternal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a denial of service invalid memory read and crash via an invalid file, which triggers an incorrect unref call...

CVE-2016-9810

The CVE-2016-9810 item applies to GStreamer’s gst-plugins-good flxdex decoder. The affected component is the gst_decode_chain_free_internal function, present in GStreamer versions prior to 1.10.2, where processing an invalid file can trigger an incorrect unref and lead to an invalid memory read, ...

UBUNTU-CVE-2016-9811

The windowsicontypefind function in gst-plugins-base in GStreamer before 1.10.2, when GSLICE is set to always-malloc, allows remote attackers to cause a denial of service out-of-bounds read via a crafted ico file...

[SECURITY] [DLA 736-1] gst-plugins-bad0.10 security update

Package : gst-plugins-bad0.10 Version : 0.10.23-7.1+deb7u4 CVE ID : CVE-2016-9809 An out of bounds heap bug was found in the H264 parser in gst-plugins-bad0.10. For Debian 7 "Wheezy", these problems have been fixed in version 0.10.23-7.1+deb7u4. We recommend that you upgrade your...

[SECURITY] [DLA 735-1] gst-plugins-base0.10 security update

Package : gst-plugins-base0.10 Version : 0.10.36-1.1+deb7u1 CVE ID : CVE-2016-9811 An out of bounds heap read issue was found in gst-plugins-base0.10. For Debian 7 "Wheezy", these problems have been fixed in version 0.10.36-1.1+deb7u1. We recommend that you upgrade your gst-plugins-base0.10...

Debian DLA-736-1 : gst-plugins-bad0.10 security update

An out of bounds heap bug was found in the H264 parser in gst-plugins-bad0.10. For Debian 7 'Wheezy', these problems have been fixed in version 0.10.23-7.1+deb7u4. We recommend that you upgrade your gst-plugins-bad0.10 packages. NOTE: Tenable Network Security has extracted the preceding descripti...

Debian DLA-735-1 : gst-plugins-base0.10 security update

An out of bounds heap read issue was found in gst-plugins-base0.10. For Debian 7 'Wheezy', these problems have been fixed in version 0.10.36-1.1+deb7u1. We recommend that you upgrade your gst-plugins-base0.10 packages. NOTE: Tenable Network Security has extracted the preceding description block...

DLA-736-1 gst-plugins-bad0.10 - security update

Bulletin has no description...

Debian DSA-3723-1 : gst-plugins-good1.0 - security update

Chris Evans discovered that the GStreamer 1.0 plugin used to decode files in the FLIC format allowed execution of arbitrary code. Further details can be found in his advisory at https://scarybeastsecurity.blogspot.de/2016/11/0day-exploit-advancing- exploitation.html %NASLMINLEVEL 70300 C Tenable...

Debian DSA-3724-1 : gst-plugins-good0.10 - security update

Chris Evans discovered that the GStreamer 0.10 plugin used to decode files in the FLIC format allowed execution of arbitrary code. Further details can be found in his advisory at https://scarybeastsecurity.blogspot.de/2016/11/0day-exploit-advancing- exploitation.html This update removes the...

[SECURITY] [DSA 3724-1] gst-plugins-good0.10 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3724-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 24, 2016 https://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-3723-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3135-1: GStreamer Good Plugins vulnerability

Chris Evans discovered that GStreamer Good Plugins did not correctly handle malformed FLC movie files. If a user were tricked into opening a crafted FLC movie file with a GStreamer application, an attacker could cause a denial of service via application crash, or execute arbitrary code with the...

[SECURITY] [DLA 712-1] gst-plugins-bad0.10 security update

Package : gst-plugins-bad0.10 Version : 0.10.23-7.1+deb7u3 CVE ID : CVE-2016-9445 CVE-2016-9446 CVE-2016-9447 CVE-2016-9445 CVE-2016-9446 Chris Evans discovered that the GStreamer plugin to decode VMware screen capture files allowed the execution of arbitrary code. He also found that an initializ...

Debian: Security Advisory (DSA-3717-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...