PT-2017-10140

CVE-2016-9445

·

Published

2016-11-17

·

Updated

2020-02-24

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions gstreamer (affected versions not specified)
Description The issue is related to an integer overflow in the vmnc decoder, which can be exploited by remote attackers to cause a denial of service (crash) by providing large width and height values, triggering a buffer overflow.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2016-2308
CESA-2016_2974
CESA-2017_0018
CESA-2017_0021
DLA-712-1
DSA-3717-1
MGASA-2018-0012
OPENSUSE-SU-2016_3147-1
OPENSUSE-SU-2016_3158-1
RHSA-2016:2974
RHSA-2016_2974
RHSA-2017:0018
RHSA-2017_0018
RHSA-2017:0021
RHSA-2017_0021
SUSE-SU-2016:3296-1
SUSE-SU-2016_3296-1
SUSE-SU-2016:3297-1
SUSE-SU-2016_3297-1
SUSE-SU-2017:0027-1
SUSE-SU-2017_0027-1
SUSE-SU-2017:0028-1
SUSE-SU-2017_0028-1
Found an issue in the description? Have something to add? Feel free to write us 👾