Summary
Hanno Böck discovered that GStreamer Base Plugins did not correctly handle
certain malformed media files. If a user were tricked into opening a
crafted media file with a GStreamer application, an attacker could cause a
denial of service via application crash.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | gst-plugins-base0.10 | 0.10.36-1.1ubuntu2.1 |
| Ubuntu · 14.04 LTS 14.04:LTS | gst-plugins-base1.0 | 1.2.4-1~ubuntu2.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | gst-plugins-base1.0 | 1.8.3-1ubuntu0.2 |
Vulnerabilities 5
-
Unscored —
The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc…
-
Unscored —
The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.…
-
Unscored —
The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.…
-
Unscored —
The html_context_handle_element function in gst/subparse/samiparse.c in gst-plugins-base in GStreamer before 1.10.3 all…
-
Unscored —
The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.…