Published: 13/01/2017 Updated: 05/01/2018

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Off-by-one error in the gst_h264_parse_set_caps function in GStreamer prior to 1.10.2 allows remote malicious users to have unspecified impact via a crafted file, which triggers an out-of-bounds read.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gstreamer gstreamer

Synopsis Moderate: gstreamer-plugins-bad-free security update Type/Severity Security Advisory: Moderate Topic An update for gstreamer-plugins-bad-free is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerabilit ...

Synopsis Moderate: gstreamer1-plugins-bad-free security update Type/Severity Security Advisory: Moderate Topic An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerabil ...

Hanno Boeck discovered multiple vulnerabilities in the GStreamer media framework and its codecs and demuxers, which may result in denial of service or the execution of arbitrary code if a malformed media file is opened For the stable distribution (jessie), these problems have been fixed in version 144-21+deb8u2 For the upcoming stable distribu ...

An out-of-bounds heap read flaw was found in GStreamer's H264 parser A remote attacker could use this flaw to cause an application using GStreamer to crash ...

CWE-125 https://gstreamer.freedesktop.org/releases/1.10/#1.10.2 https://bugzilla.gnome.org/show_bug.cgi?id=774896 http://www.openwall.com/lists/oss-security/2016/12/05/8 http://www.openwall.com/lists/oss-security/2016/12/01/2 http://www.securityfocus.com/bid/95147 https://security.gentoo.org/glsa/201705-10 http://www.debian.org/security/2017/dsa-3818 http://rhn.redhat.com/errata/RHSA-2017-0021.html http://rhn.redhat.com/errata/RHSA-2017-0018.html https://lists.debian.org/debian-lts-announce/2020/03/msg00038.html https://access.redhat.com/errata/RHSA-2017:0018 https://nvd.nist.gov https://www.debian.org/security/./dsa-3818

CVE-2016-9809

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect