Summary
Hanno Böck discovered that GStreamer Good Plugins did not correctly handle
certain malformed media files. If a user were tricked into opening a
crafted media file with a GStreamer application, an attacker could cause a
denial of service via application crash.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | gst-plugins-good0.10 | 0.10.31-3+nmu1ubuntu5.3 |
| Ubuntu · 14.04 LTS 14.04:LTS | gst-plugins-good1.0 | 1.2.4-1~ubuntu1.4 |
| Ubuntu · 16.04 LTS 16.04:LTS | gst-plugins-good1.0 | 1.8.3-1ubuntu0.4 |
Vulnerabilities 5
-
Unscored —
The gst_aac_parse_sink_setcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.…
-
Unscored —
The qtdemux_tag_add_str_full function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows rem…
-
Unscored —
The qtdemux_parse_samples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote…
-
Unscored —
The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows re…
-
Unscored —
The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows re…