Browse CVEs

HIGH 7.5 CVE-2017-5840 The qtdemux_parse_samples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial o… Gstreamer after 1.10.2 Fix from $1,9502017-02-09 HIGH 7.5 CVE-2017-5841 The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a deni… Gstreamer after 1.10.2 Fix from $1,9502017-02-09 HIGH 7.5 CVE-2017-5843 Multiple use-after-free vulnerabilities in the (1) gst_mini_object_unref, (2) gst_tag_list_unref, and (3) gst_mxf_demux_update_essence_tracks functio… Gstreamer after 1.10.2 Fix from $1,9502017-02-09 HIGH 7.5 CVE-2017-5845 The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a deni… Gstreamer after 1.10.2 Fix from $1,9502017-02-09 MEDIUM 5.5 CVE-2017-5837 The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to c… Gstreamer after 1.10.2 Fix from $1,6002017-02-09 MEDIUM 5.5 CVE-2017-5842 The html_context_handle_element function in gst/subparse/samiparse.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause … Gstreamer after 1.10.2 Fix from $1,6002017-02-09 MEDIUM 5.5 CVE-2017-5844 The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to c… Gstreamer after 1.10.2 Fix from $1,6002017-02-09 MEDIUM 5.5 CVE-2017-5846 The gst_asf_demux_process_ext_stream_props function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer before 1.10.3 allows remote attack… Gstreamer after 1.10.2 Fix from $1,6002017-02-09 HIGH 7.5 CVE-2016-10199 The qtdemux_tag_add_str_full function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denia… Gstreamer after 1.10.2 Fix from $1,9502017-02-09 MEDIUM 5.5 CVE-2016-10198 The gst_aac_parse_sink_setcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to c… Gstreamer after 1.10.2 Fix from $1,6002017-02-09 HIGH 7.8 CVE-2016-9447 The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service (out-of-bounds read or write) and possibl… Gstreamer Mitigation only Fix from $1,9502017-01-23 HIGH 7.5 CVE-2016-9445 Integer overflow in the vmnc decoder in the gstreamer allows remote attackers to cause a denial of service (crash) via large width and height values,… Gstreamer Mitigation only Fix from $1,9502017-01-23 HIGH 7.8 CVE-2016-9809 Off-by-one error in the gst_h264_parse_set_caps function in GStreamer before 1.10.2 allows remote attackers to have unspecified impact via a crafted … Gstreamer after 1.10.1 Fix from $1,9502017-01-13 HIGH 7.5 CVE-2016-9808EPSS 5% The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via a crafted series… Gstreamer after 1.10.1 Fix from $1,9502017-01-13 HIGH 7.5 CVE-2016-9812 The gst_mpegts_section_new function in the mpegts decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bou… Gstreamer after 1.10.1 Fix from $1,9502017-01-13 MEDIUM 5.5 CVE-2016-9810 The gst_decode_chain_free_internal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a d… Gstreamer after 1.10.1 Fix from $1,6002017-01-13 MEDIUM 5.5 CVE-2016-9813EPSS 8% The _parse_pat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (NULL pointer dereferenc… Gstreamer after 1.10.1 Fix from $1,6002017-01-13 MEDIUM 5.5 CVE-2016-9807 The flx_decode_chunks function in gst/flx/gstflxdec.c in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (invalid memory… Gstreamer after 1.10.1 Fix from $1,6002017-01-13 MEDIUM 6.8 CVE-2009-1932EPSS 5% Multiple integer overflows in the (1) user_info_callback, (2) user_endrow_callback, and (3) gst_pngdec_task functions (ext/libpng/gstpngdec.c) in GSt… Good Plug Ins No fix yet Fix from $1,6002009-06-04 HIGH 9.3 CVE-2009-0397EPSS 7% Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 th… Good Plug Ins Patch available Fix from $1,9502009-02-03 HIGH 9.3 CVE-2009-0398 Array index error in the gst_qtp_trak_handler function in gst/qtdemux/qtdemux.c in GStreamer Plug-ins (aka gstreamer-plugins) 0.6.0 allows remote att… Plug Ins No fix yet Fix from $1,9502009-02-03 HIGH 9.3 CVE-2009-0386EPSS 7% Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 th… Good Plug Ins Patch available Fix from $1,9502009-02-02 HIGH 9.3 CVE-2009-0387EPSS 6% Array index error in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.1… Good Plug Ins Patch available Fix from $1,9502009-02-02