Published: 13/01/2017 Updated: 05/01/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

The _parse_pat function in the mpegts parser in GStreamer prior to 1.10.2 allows remote malicious users to cause a denial of service (NULL pointer dereference and crash) via a crafted file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gstreamer gstreamer

Synopsis Moderate: gstreamer1-plugins-bad-free security update Type/Severity Security Advisory: Moderate Topic An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerabil ...

Hanno Boeck discovered multiple vulnerabilities in the GStreamer media framework and its codecs and demuxers, which may result in denial of service or the execution of arbitrary code if a malformed media file is opened For the stable distribution (jessie), these problems have been fixed in version 144-21+deb8u2 For the upcoming stable distribu ...

A NULL pointer dereference flaw was found in GStreamer's MPEG-TS parser A remote attacker could use this flaw to cause an application using GStreamer to crash ...

Source: bugzillagnomeorg/show_bugcgi?id=775120 The attached file will cause a null pointer access and segfault in the mpegts parser Current git code, found with afl ASAN stack trace: ================================================================= ==32545==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x7fe9571 ...

CWE-476 https://gstreamer.freedesktop.org/releases/1.10/#1.10.2 https://bugzilla.gnome.org/show_bug.cgi?id=775120 http://www.openwall.com/lists/oss-security/2016/12/05/8 http://www.openwall.com/lists/oss-security/2016/12/01/2 http://www.securityfocus.com/bid/95158 https://security.gentoo.org/glsa/201705-10 https://www.exploit-db.com/exploits/42162/http://www.debian.org/security/2017/dsa-3818 http://rhn.redhat.com/errata/RHSA-2017-0021.html https://access.redhat.com/errata/RHSA-2017:0021 https://nvd.nist.gov https://www.exploit-db.com/exploits/42162/https://www.debian.org/security/./dsa-3818

CVE-2016-9813

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect