5
CVSSv2

CVE-2016-9445

Published: 23/01/2017 Updated: 07/11/2023
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

Integer overflow in the vmnc decoder in the gstreamer allows remote malicious users to cause a denial of service (crash) via large width and height values, which triggers a buffer overflow.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

gstreamer project gstreamer 1.10.0

Vendor Advisories

Synopsis Moderate: gstreamer-plugins-bad-free security update Type/Severity Security Advisory: Moderate Topic An update for gstreamer-plugins-bad-free is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerabilit ...
Synopsis Moderate: gstreamer1-plugins-bad-free security update Type/Severity Security Advisory: Moderate Topic An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerabil ...
Synopsis Important: gstreamer-plugins-bad-free security update Type/Severity Security Advisory: Important Topic An update for gstreamer-plugins-bad-free is now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerabi ...
An integer overflow flaw, leading to a heap-based buffer overflow, was found in GStreamer's VMware VMnc video file format decoding plug-in A remote attacker could use this flaw to cause an application using GStreamer to crash or, potentially, execute arbitrary code with the privileges of the user running the application ...
The vmnc decoder in gst-plugins-bad of the gstreamer code base contains a width * height * depth integer overflow in the allocation of the render buffer inside gst/vmnc/vmncdecc ...