The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service (out-of-bounds read or write) and possibly execute arbitrary code via a crafted NSF music file.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade gstreamer-plugins-bad-freeUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer-plugins-bad-free-debuginfo | Jan 27, 2017 | Jan 9, 2017 |
| Debian | — | Upgrade gst-plugins-bad0.10 | Mar 31, 2017 | Nov 20, 2016 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-base.Upgrade media-libs/gst-plugins-bad.Upgrade media-libs/gst-plugins-good.Upgrade media-libs/gst-plugins-ugly. | Oct 30, 2017 | Jan 23, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade gstreamer-plugins-bad-freeUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer-plugins-bad-free-devel-docs | Nov 30, 2017 | Jan 23, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gstreamer-plugins-bad-free | Nov 30, 2017 | Jan 23, 2017 |
| Oracle Solaris | — | Upgrade library/audio/gstreamer to version 0.10.32-0.175.3.0.0.26.0 on Solaris 11.3 | Oct 31, 2018 | Jan 23, 2017 |
| Oracle_linux | — | Upgrade gstreamer-plugins-bad-freeUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer-plugins-bad-free-extrasUpgrade gstreamer-plugins-bad-free-devel-docs | Jan 5, 2017 | Nov 14, 2016 |
| Redhat_linux | — | Upgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer-plugins-bad-free | Jan 5, 2017 | Jan 5, 2017 |
| Suse | — | Upgrade libgstcodecparsers-0_10-23Upgrade libgstvdp-0_10-23-32bitUpgrade libgstsignalprocessor-0_10-23Upgrade gstreamer-0_10-plugins-bad-develUpgrade gstreamer-0_10-plugins-badUpgrade libgstvdp-0_10-23Upgrade libgstbasecamerabinsrc-0_10-23Upgrade libgstphotography-0_10-23Upgrade libgstbasevideo-0_10-23Upgrade gstreamer-0_10-plugins-bad-langUpgrade libgstbasecamerabinsrc-0_10-23-32bitUpgrade libgstbasevideo-0_10-23-32bitUpgrade libgstsignalprocessor-0_10-23-32bitUpgrade libgstphotography-0_10-23-32bit | Jan 6, 2017 | Jan 5, 2017 |
| Ubuntu | — | Upgrade gst-plugins-bad0.10 | Nov 19, 2024 | Jan 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub