The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service (out-of-bounds read or write) and possibly execute arbitrary code via a crafted NSF music file.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer-plugins-bad-free | Jan 27, 2017 | Jan 9, 2017 |
| Debian | — | Upgrade gst-plugins-bad0.10 | Mar 31, 2017 | Nov 20, 2016 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-base.Upgrade media-libs/gst-plugins-bad.Upgrade media-libs/gst-plugins-ugly.Upgrade media-libs/gst-plugins-good. | Oct 30, 2017 | Jan 23, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade gstreamer-plugins-bad-free-develUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer-plugins-bad-free-devel-docs | Nov 30, 2017 | Jan 23, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gstreamer-plugins-bad-free | Nov 30, 2017 | Jan 23, 2017 |
| Oracle Solaris | — | Upgrade library/audio/gstreamer to version 0.10.32-0.175.3.0.0.26.0 on Solaris 11.3 | Oct 31, 2018 | Jan 23, 2017 |
| Oracle_linux | — | Upgrade gstreamer-plugins-bad-freeUpgrade gstreamer-plugins-bad-free-extrasUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer-plugins-bad-free-devel | Jan 5, 2017 | Nov 14, 2016 |
| Redhat_linux | — | Upgrade gstreamer-plugins-bad-freeUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade gstreamer-plugins-bad-free-devel-docs | Jan 5, 2017 | Jan 5, 2017 |
| Suse | — | Upgrade libgstsignalprocessor-0_10-23Upgrade libgstvdp-0_10-23-32bitUpgrade libgstcodecparsers-0_10-23Upgrade gstreamer-0_10-plugins-bad-develUpgrade libgstvdp-0_10-23Upgrade gstreamer-0_10-plugins-bad-langUpgrade libgstbasecamerabinsrc-0_10-23-32bitUpgrade libgstphotography-0_10-23Upgrade libgstbasevideo-0_10-23-32bitUpgrade libgstphotography-0_10-23-32bitUpgrade libgstbasecamerabinsrc-0_10-23Upgrade gstreamer-0_10-plugins-badUpgrade libgstsignalprocessor-0_10-23-32bitUpgrade libgstbasevideo-0_10-23 | Jan 6, 2017 | Jan 5, 2017 |
| Ubuntu | — | Upgrade gst-plugins-bad0.10 | Nov 19, 2024 | Jan 23, 2017 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub