| Max CVSS | 5.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2016-9446 | 5.0 |
The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1 frame vmnc movie that does not draw to the allocated render canvas.
|
30-11-2021 - 22:12 | 23-01-2017 - 21:59 | |
| CVE-2016-9811 | 4.3 |
The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ico file.
|
29-11-2021 - 21:08 | 13-01-2017 - 16:59 | |
| CVE-2017-5848 | 5.0 |
The gst_ps_demux_parse_psm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in GStreamer allows remote attackers to cause a denial of service (invalid memory read and crash) via vectors involving PSM parsing.
|
20-11-2020 - 18:59 | 09-02-2017 - 15:59 | |
| CVE-2017-5840 | 5.0 |
The qtdemux_parse_samples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving the current stts index.
|
30-05-2020 - 18:15 | 09-02-2017 - 15:59 | |
| CVE-2016-10198 | 4.3 |
The gst_aac_parse_sink_setcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted audio file.
|
30-05-2020 - 18:15 | 09-02-2017 - 15:59 | |
| CVE-2017-5844 | 4.3 |
The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (floating point exception and crash) via a crafted ASF file.
|
03-10-2019 - 00:03 | 09-02-2017 - 15:59 | |
| CVE-2017-5837 | 4.3 |
The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (floating point exception and crash) via a crafted video file.
|
03-10-2019 - 00:03 | 09-02-2017 - 15:59 | |
| CVE-2017-5839 | 5.0 |
The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 does not properly limit recursion, which allows remote attackers to cause a denial of service (stack overflow and crash) via vect
|
03-10-2019 - 00:03 | 09-02-2017 - 15:59 | |
| CVE-2017-5841 | 5.0 |
The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving ncdt tags.
|
05-01-2018 - 02:31 | 09-02-2017 - 15:59 | |
| CVE-2017-5842 | 4.3 |
The html_context_handle_element function in gst/subparse/samiparse.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted SMI file, as demonstrated by OneNote_Manager.
|
05-01-2018 - 02:31 | 09-02-2017 - 15:59 | |
| CVE-2017-5838 | 5.0 |
The gst_date_time_new_from_iso8601_string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a malformed datetime string.
|
05-01-2018 - 02:31 | 09-02-2017 - 15:59 | |
| CVE-2017-5843 | 5.0 |
Multiple use-after-free vulnerabilities in the (1) gst_mini_object_unref, (2) gst_tag_list_unref, and (3) gst_mxf_demux_update_essence_tracks functions in GStreamer before 1.10.3 allow remote attackers to cause a denial of service (crash) via vectors
|
05-01-2018 - 02:31 | 09-02-2017 - 15:59 | |
| CVE-2017-5845 | 5.0 |
The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory read and crash) via a ncdt sub-tag that "goes behind" the surrounding t
|
05-01-2018 - 02:31 | 09-02-2017 - 15:59 | |
| CVE-2016-9810 | 4.3 |
The gst_decode_chain_free_internal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (invalid memory read and crash) via an invalid file, which triggers an incorrect unr
|
05-01-2018 - 02:31 | 13-01-2017 - 16:59 | |
| CVE-2016-10199 | 5.0 |
The qtdemux_tag_add_str_full function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted tag value.
|
05-01-2018 - 02:30 | 09-02-2017 - 15:59 |