CVE-2017-5841

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.10.3

Description The issue is related to the gst avi demux parse ncdt function in the gst-plugins-good plugin of the GStreamer multimedia framework. It allows remote attackers to cause a denial of service due to an out-of-bounds heap read via vectors involving ncdt tags.

Recommendations For versions prior to 1.10.3, update to version 1.10.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of the gst avi demux parse ncdt function until a patch is available. Avoid using ncdt tags in affected operations until the issue is resolved.