PT-2017-4049 · Gstreamer+5 · Gstreamer+5
Publicado
2017-01-18
·
Atualizado
2020-05-30
·
CVE-2017-5840
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
GStreamer gst-plugins-good versions prior to 1.10.3
Description
The issue is related to the qtdemux parse samples function in gst/isomp4/qtdemux.c, which allows remote attackers to cause a denial of service due to an out-of-bounds heap read. This can be achieved through vectors involving the current stts index.
Recommendations
For versions prior to 1.10.3, update to version 1.10.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the qtdemux parse samples function until a patch is available.
Correção
DoS
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Gstreamer
Red Hat
Suse
Ubuntu