4712 matches found
CVE-2016-9636
GStreamer vulnerability CVE-2016-9636 affects the FLIC decoder (gst/flx/gstflxdec.c, function flx_decode_delta_fli). The issue is a heap-based buffer overflow caused by a write count that can exceed the initialized buffer, allowing a remote attacker to potentially execute arbitrary code or crash ...
CVE-2016-9634
CVE-2016-9634 affects GStreamer’s FLIC decoder (flx_decode_delta_fli in gst/flx/gstflxdec.c). The IBM bulletin ties this to PowerKVM, noting GStreamer vulnerabilities in the FLC/FLI/FLX decoding plug-in could allow a remote attacker to crash an application or execute arbitrary code via a speciall...
CVE-2016-9636
Heap-based buffer overflow in the flxdecodedeltafli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash by providing a 'write count' that goes beyond the initialized buffer...
CVE-2016-9635
GStreamer vulnerability CVE-2016-9635 affects the FLIC decoder (gst/flx/gstflxdec.c) where a skip_count beyond the initialized buffer can cause a heap-based overflow. A remote attacker could execute arbitrary code or cause a crash. Affected: GStreamer up to version 1.10.1 (before 1.10.2). Remedia...
CVE-2016-9635
Heap-based buffer overflow in the flxdecodedeltafli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash by providing a 'skip count' that goes beyond initialized buffer...
CVE-2016-9636
Heap-based buffer overflow in the flxdecodedeltafli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash by providing a 'write count' that goes beyond the initialized buffer...
CVE-2016-9634
Heap-based buffer overflow in the flxdecodedeltafli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via the startline parameter...
CVE-2016-9636
Heap-based buffer overflow in the flxdecodedeltafli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash by providing a 'write count' that goes beyond the initialized buffer...
CVE-2016-9635
Heap-based buffer overflow in the flxdecodedeltafli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash by providing a 'skip count' that goes beyond initialized buffer...
Security update for gstreamer-0_10-plugins-good (important)
This update for gstreamer-010-plugins-good fixes the following issues: - CVE-2016-9634: Invalid FLIC files could have caused and an out-of-bounds write bsc1012102 - CVE-2016-9635: Invalid FLIC files could have caused and an out-of-bounds write bsc1012103 - CVE-2016-9636: Prevent maliciously craft...
MGASA-2017-0021 Updated gstreamer packages fix security vulnerability
Out of bounds heap read in windowsicontypefind in gst/typefind/gsttypefindfunctions.c CVE-2016-9811...
Updated gstreamer packages fix security vulnerability
Out of bounds heap read in windowsicontypefind in gst/typefind/gsttypefindfunctions.c CVE-2016-9811...
openSUSE Security Update : gstreamer-0_10-plugins-bad (openSUSE-2017-152)
This update for gstreamer-010-plugins-bad fixes the following issue : - CVE-2016-9809: Off by one read in gsth264parsesetcaps bsc1013659 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
SUSE SLES11 Security Update : gstreamer-0_10-plugins-base (SUSE-SU-2017:0289-1)
This update for gstreamer-010-plugins-base fixes the following issue : - CVE-2016-9811: Out of bounds memory read in windowsicontypefind bsc1013669. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...
SUSE-SU-2017:0289-1 Security update for gstreamer-0_10-plugins-base
This update for gstreamer-010-plugins-base fixes the following issue: - CVE-2016-9811: Out of bounds memory read in windowsicontypefind bsc1013669...
SUSE SLED12 / SLES12 Security Update : gstreamer-0_10-plugins-base (SUSE-SU-2017:0263-1)
gstreamer-010-plugins-base was updated to fix one issue. This security issue was fixed : - CVE-2016-9811: Out of bounds memory read in windowsicontypefind bsc1013669. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable...
CVE-2016-9447
The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service out-of-bounds read or write and possibly execute arbitrary code via a crafted NSF music file...
CVE-2016-9446
The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1 frame vmnc movie that does not draw to the allocated render canvas...
CVE-2016-9446
The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1 frame vmnc movie that does not draw to the allocated render canvas...