The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service (out-of-bounds read or write) and possibly execute arbitrary code via a crafted NSF music file.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade gstreamer-plugins-bad-freeUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer-plugins-bad-free-debuginfo | Jan 27, 2017 | Jan 9, 2017 |
| Debian | — | Upgrade gst-plugins-bad0.10 | Mar 31, 2017 | Nov 20, 2016 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-good.Upgrade media-libs/gst-plugins-ugly.Upgrade media-libs/gst-plugins-bad.Upgrade media-libs/gst-plugins-base. | Oct 30, 2017 | Jan 23, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade gstreamer-plugins-bad-freeUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer-plugins-bad-free-devel-docs | Nov 30, 2017 | Jan 23, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gstreamer-plugins-bad-free | Nov 30, 2017 | Jan 23, 2017 |
| Oracle Solaris | — | Upgrade library/audio/gstreamer to version 0.10.32-0.175.3.0.0.26.0 on Solaris 11.3 | Oct 31, 2018 | Jan 23, 2017 |
| Oracle_linux | — | Upgrade gstreamer-plugins-bad-freeUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer-plugins-bad-free-extras | Jan 5, 2017 | Nov 14, 2016 |
| Redhat_linux | — | Upgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade gstreamer-plugins-bad-free-devel | Jan 5, 2017 | Jan 5, 2017 |
| Suse | — | Upgrade libgstcodecparsers-0_10-23Upgrade libgstsignalprocessor-0_10-23Upgrade gstreamer-0_10-plugins-bad-develUpgrade libgstvdp-0_10-23-32bitUpgrade libgstvdp-0_10-23Upgrade libgstphotography-0_10-23-32bitUpgrade gstreamer-0_10-plugins-badUpgrade libgstbasevideo-0_10-23Upgrade libgstphotography-0_10-23Upgrade libgstbasecamerabinsrc-0_10-23Upgrade libgstbasevideo-0_10-23-32bitUpgrade gstreamer-0_10-plugins-bad-langUpgrade libgstbasecamerabinsrc-0_10-23-32bitUpgrade libgstsignalprocessor-0_10-23-32bit | Jan 6, 2017 | Jan 5, 2017 |
| Ubuntu | — | Upgrade gst-plugins-bad0.10 | Nov 19, 2024 | Jan 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub