CVE-2017-5845

The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in
gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to
cause a denial of service (invalid memory read and crash) via a ncdt
sub-tag that “goes behind” the surrounding tag.

Bugs

• <https://bugzilla.gnome.org/show_bug.cgi?id=777532&gt;