CVE-2016-9446

Name of the Vulnerable Software and Affected Versions gstreamer (affected versions not specified)

Description The issue concerns the vmnc decoder in the gstreamer, which fails to initialize the render canvas. This allows remote attackers to obtain sensitive information. An example of exploitation is through thumbnailing a simple 1-frame vmnc movie that does not draw to the allocated render canvas.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.