PT-2017-10141 · Gstreamer+4 · Gstreamer+4

Chris Evans · Publicado 2016-11-17 · Atualizado 2021-11-30 · CVE-2016-9446

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions gstreamer (affected versions not specified)

Description The issue concerns the vmnc decoder in the gstreamer, which fails to initialize the render canvas. This allows remote attackers to obtain sensitive information. An example of exploitation is through thumbnailing a simple 1-frame vmnc movie that does not draw to the allocated render canvas.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Initialization

Enumeração de Fraquezas

CWE-665

Identificadores relacionados

ALT-PU-2017-1563

CESA-2017_2060

CVE-2016-9446

DLA-712-1

DSA-3717-1

MGASA-2018-0012

OPENSUSE-SU-2016_3147-1

OPENSUSE-SU-2016_3158-1

RHSA-2017:2060

RHSA-2017_2060

SUSE-SU-2016:3296-1

SUSE-SU-2016:3297-1

SUSE-SU-2017:0027-1

SUSE-SU-2017:0028-1

Produtos afetados

Alt Linux

Centos

Red Hat

Suse

Gstreamer

Referências · 136

• 🔥 https://scarybeastsecurity.blogspot.de/2016/11/0day-poc-risky-design-decisions-in.html · Exploit
• https://lists.centos.org/pipermail/centos-cr-announce/2017-August/030469.html · Nota
• https://suse.com/security/cve/CVE-2016-9809 · Nota
• https://packages.debian.org/src:gst-plugins-bad1.0 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5843 · Nota de Segurança
• http://openwall.com/lists/oss-security/2016/11/18/12 · Nota
• https://cgit.freedesktop.org/gstreamer/gst-plugins-bad/commit/gst/vmnc/vmncdec.c?id=4cb1bcf1422bbcd79c0f683edb7ee85e3f7a31fe · Nota
• https://lists.centos.org/pipermail/centos-cr-announce/2017-August/023776.html · Nota
• http://openwall.com/lists/oss-security/2016/12/05/8 · Nota
• https://bugzilla.gnome.org/show_bug.cgi?id=774533 · Nota
• https://packages.altlinux.org/ru/vuln/CVE-2016-9446 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2016:3296-1 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5840 · Nota de Segurança
• https://suse.com/support/update/announcement/2016/suse-su-20163297-1 · Nota
• https://debian.org/security/2017/dsa-3818 · Aviso do Fabricante