Fedora 25 : mingw-gstreamer1-plugins-good (2017-1fc4026d15)

Security fix for CVE-2016-10199, CVE-2017-5845, CVE-2017-5840, CVE-2017-5841 - Downgrade to 1.10.3 as it is the latest stable release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...

GStreamer gst-plugins-good denial of service vulnerability (CNVD-2017-01450)

GStreamer is a set of frameworks for handling streaming media. A denial-of-service vulnerability exists in GStreamer gst-plugins-good, which allows remote attackers to exploit the vulnerability to cause a denial of service out-of-bounds heap read...

GStreamer gst-plugins-good denial of service vulnerability (CNVD-2017-01451)

GStreamer is a set of frameworks for handling streaming media. A denial-of-service vulnerability in the gstavidemuxparsencdt function in gst/avi/gstavidemux.c in GStreamer gst-plugins-good allows remote attackers to cause a denial of service out-of-bounds heap read...

GStreamer gst-plugins-good denial of service vulnerability (CNVD-2017-01486)

GStreamer is a set of frameworks for handling streaming media. A denial of service vulnerability exists in GStreamer gst-plugins-good, which allows remote attackers to cause a denial of service out-of-bounds reads and crashes via a crafted tagged value...

GStreamer gst-plugins-good Denial of Service Vulnerability

GStreamer is a set of frameworks for handling streaming media. A denial of service vulnerability exists in GStreamer gst-plugins-good. A remote attacker can cause a denial of service invalid memory reads and crashes via a crafted audio file...

ALPINE-CVE-2017-5840

The qtdemuxparsesamples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds heap read via vectors involving the current stts index...

CVE-2017-5840

The qtdemuxparsesamples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds heap read via vectors involving the current stts index...

CVE-2016-10199

The qtdemuxtagaddstrfull function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted tag value...

DEBIAN-CVE-2016-10198

The gstaacparsesinksetcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted audio file...

Design/Logic Flaw

The qtdemuxparsesamples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds heap read via vectors involving the current stts index...

CVE-2016-10199

The qtdemuxtagaddstrfull function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted tag value...

CVE-2016-10198

The gstaacparsesinksetcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted audio file...

CVE-2017-5845

The gstavidemuxparsencdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service invalid memory read and crash via a ncdt sub-tag that "goes behind" the surrounding tag...

CVE-2017-5840

The qtdemuxparsesamples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds heap read via vectors involving the current stts index...

CVE-2017-5840

The qtdemuxparsesamples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds heap read via vectors involving the current stts index...

CVE-2016-10199

The qtdemuxtagaddstrfull function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted tag value...

CVE-2017-5841

The CVE-2017-5841 entry affects the GStreamer project, specifically the gst-plugins-good component. It concerns the gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c and is exploitable via crafted audiovisual files to trigger an out-of-bounds heap read, causing a denial of service. Publi...

CVE-2017-5845

The CVE-2017-5845 issue affects GStreamer gst-plugins-good prior to 1.10.3. The vulnerability is in the gst_avi_demux_parse_ncdt function, allowing remote attackers to trigger a denial of service (invalid memory read and crash) via a crafted ncdt sub-tag. Public advisories (Debian, Arch, Gentoo/C...

CVE-2016-10198

The gstaacparsesinksetcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted audio file...

CVE-2017-5841

The gstavidemuxparsencdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds heap read via vectors involving ncdt tags...