Veracode Vulnerability DatabaseVERACODE:7463Denial Of Service (DoS)
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
libgstreamer-0.10.so is vulnerable to denial of service. A remote attacker is able to produce a floating point exception in the gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c and cause the application to crash via a crafted ASF file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libgstreamer-0.10.so | eq | 0.25.0 |
References
www.debian.org/security/2017/dsa-3819
www.openwall.com/lists/oss-security/2017/02/01/7
www.openwall.com/lists/oss-security/2017/02/02/9
www.securityfocus.com/bid/96001
access.redhat.com/errata/RHSA-2017:2060
bugzilla.gnome.org/show_bug.cgi?id=777525
github.com/GStreamer/gst-plugins-base/commit/5d505d108800cef210f67dcfed2801ba36beac2a
gstreamer.freedesktop.org/releases/1.10/#1.10.3
security.gentoo.org/glsa/201705-10
Related
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P