Hanno Bã¶Ck

The issue allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving extended content descriptors. This is due to a problem in the `gst asf demux process ext content desc` function.

The issue allows remote attackers to cause a denial of service, resulting in an invalid memory read and crash. This is achieved through vectors involving PSM parsing, specifically targeting the gst ps demux parse psm function in gst/mpegdemux/gstmpegdemux.c.

The issue allows remote attackers to cause a denial of service, resulting in a crash due to a floating point exception, by providing a crafted video file. This is related to the `gst riff create audio caps` function in `gst-libs/gst/riff/riff-media.c` in `gst-plugins-base`.

The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds heap read, by providing a malformed datetime string to the `gst date time new from iso8601 string` function in `gst/gstdatetime.c`.

The issue is related to the gst riff create audio caps function in gst-libs/gst/riff/riff-media.c, which does not properly limit recursion. This allows remote attackers to cause a denial of service, resulting in a stack overflow and crash, via vectors involving nested WAVEFORMATEX.

The issue allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted SMI file. This is demonstrated by the OneNote Manager.smi file.

The issue involves multiple use-after-free vulnerabilities in certain functions within GStreamer. These vulnerabilities can be exploited by remote attackers to cause a denial of service, specifically a crash, through vectors involving stream tags. This has been demonstrated with a specific file, 02785736.mxf, which highlights the potential for exploitation.

The issue allows remote attackers to cause a denial of service, resulting in a crash due to a floating point exception, by providing a crafted ASF file. This is related to the `gst riff create audio caps` function in `gst-libs/gst/riff/riff-media.c` in `gst-plugins-base`.

The issue allows remote attackers to cause a denial of service, resulting in an invalid memory read and crash. This is related to the number of languages in a video file, specifically involving the gst asf demux process ext stream props function in gst-plugins-ugly.

The issue is related to the gst avi demux parse ncdt function in the gst-plugins-good plugin of the GStreamer multimedia framework. It allows remote attackers to cause a denial of service due to an invalid memory read and crash. This can be achieved by using a specially crafted ncdt sub-tag that exceeds the boundaries of the surrounding tag.

The issue is related to the gst avi demux parse ncdt function in the gst-plugins-good plugin of the GStreamer multimedia framework. It allows remote attackers to cause a denial of service due to an out-of-bounds heap read via vectors involving ncdt tags.

The issue is caused by a buffer overflow in the ASN.1 implementation, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted ANY field in serialized data. This can lead to memory corruption. The vulnerability is related to the misinterpretation of large universal tags as negative zero values in ANY structures.

A cross-site scripting (XSS) issue allows remote authenticated users to inject arbitrary web script or HTML. This can be achieved via the `Real name` field in Personal Settings, which is then presented to readers of articles, or through a file upload, such as uploading .htm, .html, or .js files.