The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ico file.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gst-plugins-base1 | Sep 20, 2017 | Jan 13, 2017 |
| Centos_linux | — | Upgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade orc-develUpgrade orc-docUpgrade gstreamer1-devel-docsUpgrade gstreamer1-develUpgrade gstreamer-plugins-good-debuginfoUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer1Upgrade orcUpgrade clutter-gst2-debuginfoUpgrade orc-debuginfoUpgrade clutter-gst2-develUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer-plugins-goodUpgrade clutter-gst2Upgrade gstreamer1-plugins-bad-free-gtkUpgrade gnome-video-effectsUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-base-develUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer1-debuginfoUpgrade gstreamer-plugins-bad-freeUpgrade orc-compilerUpgrade gstreamer1-plugins-base | Aug 28, 2019 | Jan 13, 2017 |
| Debian | — | Upgrade gst-plugins-base1.0Upgrade gst-plugins-base0.10 | Mar 28, 2017 | Jan 13, 2017 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-base.Upgrade media-libs/gst-plugins-bad.Upgrade media-libs/gst-plugins-good.Upgrade media-libs/gst-plugins-ugly. | Oct 30, 2017 | Jan 13, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade gstreamer-plugins-bad-free-develUpgrade gstreamer1Upgrade gstreamer1-plugins-base-develUpgrade gstreamer1-develUpgrade gstreamer1-plugins-goodUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1-plugins-baseUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer-plugins-goodUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-bad-free | Nov 30, 2017 | Jan 13, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-develUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1 | Nov 30, 2017 | Jan 13, 2017 |
| Oracle Solaris | — | Upgrade library/audio/gstreamer to version 0.10.32-0.175.3.0.0.26.0 on Solaris 11.3 | Oct 31, 2018 | Jan 13, 2017 |
| Oracle_linux | — | Upgrade orc-compilerUpgrade gstreamer1-plugins-base-toolsUpgrade clutter-gst2Upgrade gstreamer1-plugins-base-develUpgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer1-plugins-baseUpgrade gstreamer1Upgrade orc-develUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer-plugins-goodUpgrade gnome-video-effectsUpgrade orc-docUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade clutter-gst2-develUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-develUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer1-devel-docsUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer1-plugins-base-devel-docsUpgrade orcUpgrade gstreamer-plugins-bad-free | Aug 8, 2017 | Nov 23, 2016 |
| Redhat_linux | — | Upgrade gstreamer-plugins-bad-free-develUpgrade orc-docUpgrade clutter-gst2Upgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade clutter-gst2-develUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-devel-docsUpgrade gstreamer1-develUpgrade orcUpgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-plugins-goodUpgrade clutter-gst2-debuginfoNo solution existsUpgrade orc-develUpgrade orc-debuginfoUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-base-toolsUpgrade orc-compilerUpgrade gstreamer1Upgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer-plugins-good-debuginfoUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer1-plugins-base-debuginfoUpgrade gnome-video-effectsUpgrade gstreamer1-debuginfoUpgrade gstreamer-plugins-good | Aug 3, 2017 | Jan 13, 2017 |
| Suse | — | Upgrade gstreamer-plugins-baseUpgrade libgstapp-1_0-0Upgrade libgstvideo-1_0-0-32bitUpgrade libgstriff-1_0-0Upgrade libgstsdp-1_0-0Upgrade libgstallocators-1_0-0Upgrade typelib-1_0-GstRiff-1_0Upgrade gstreamer-0_10-plugins-base-langUpgrade typelib-1_0-GstApp-0_10Upgrade libgstfft-1_0-0-32bitUpgrade gstreamer-plugins-base-langUpgrade libgstrtsp-1_0-0Upgrade typelib-1_0-gstrtsp-1_0Upgrade libgstvideo-1_0-0Upgrade libgstinterfaces-0_10-0-32bitUpgrade libgstaudio-1_0-0Upgrade libgsttag-1_0-0-32bitUpgrade typelib-1_0-gstvideo-1_0Upgrade typelib-1_0-GstInterfaces-0_10Upgrade typelib-1_0-gstpbutils-1_0Upgrade gstreamer-0_10-plugins-baseUpgrade libgstpbutils-1_0-0-32bitUpgrade gstreamer-0_10-plugins-base-x86Upgrade gstreamer-0_10-plugins-base-32bitUpgrade libgstapp-0_10-0-32bitUpgrade typelib-1_0-gstsdp-1_0Upgrade gstreamer-0_10-plugins-base-docUpgrade libgstrtp-1_0-0Upgrade libgstinterfaces-0_10-0Upgrade libgstapp-1_0-0-32bitUpgrade typelib-1_0-gsttag-1_0Upgrade libgsttag-1_0-0Upgrade typelib-1_0-gstaudio-1_0Upgrade gstreamer-0_10-plugins-base-develUpgrade libgstapp-0_10-0-x86Upgrade libgstapp-0_10-0Upgrade libgstpbutils-1_0-0Upgrade typelib-1_0-gstallocators-1_0Upgrade libgstaudio-1_0-0-32bitUpgrade libgstinterfaces-0_10-0-x86Upgrade typelib-1_0-GstFft-1_0Upgrade gstreamer-plugins-base-develUpgrade typelib-1_0-gstapp-1_0Upgrade typelib-1_0-gstrtp-1_0Upgrade libgstfft-1_0-0 | Jan 17, 2017 | Jan 13, 2017 |
| Ubuntu | — | Upgrade gstreamer0.10-plugins-baseUpgrade gstreamer1.0-plugins-base | Mar 28, 2017 | Jan 13, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub