Skip to content
OpenAdvisories
Unscored USN-3135-2 0 CVEs

gst-plugins-good0.10, gst-plugins-good1.0 vulnerability

Published Nov 28, 2016 · Updated Apr 22, 2026

Summary

USN-3135-1 fixed a vulnerability in GStreamer Good Plugins. The original
security fix was incomplete. This update fixes the problem.

Original advisory details:

Chris Evans discovered that GStreamer Good Plugins did not correctly handle
malformed FLC movie files. If a user were tricked into opening a crafted
FLC movie file with a GStreamer application, an attacker could cause a
denial of service via application crash, or execute arbitrary code with the
privileges of the user invoking the program.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS gst-plugins-good0.10 0.10.31-3+nmu1ubuntu5.2
Ubuntu · 14.04 LTS 14.04:LTS gst-plugins-good1.0 1.2.4-1~ubuntu1.3
Ubuntu · 16.04 LTS 16.04:LTS gst-plugins-good1.0 1.8.2-1ubuntu0.3

References

  • report
    https://launchpad.net/bugs/1643901