Red Hat Security AdvisoryRHSA-2016:2974
gstreamer-plugins-bad-free security update
Released 2016-12-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) gstreamer-plugins-bad-free-0.10.19-5.el6_8
- Red Hat Enterprise Linux Desktop Optional (v. 6) gstreamer-plugins-bad-free-devel-0.10.19-5.el6_8, gstreamer-plugins-bad-free-devel-docs-0.10.19-5.el6_8, gstreamer-plugins-bad-free-extras-0.10.19-5.el6_8
- Red Hat Enterprise Linux Server (v. 6) gstreamer-plugins-bad-free-0.10.19-5.el6_8, gstreamer-plugins-bad-free-0.10.19-5.el6_8.ppc
- Red Hat Enterprise Linux Server Optional (v. 6) gstreamer-plugins-bad-free-devel-0.10.19-5.el6_8, gstreamer-plugins-bad-free-devel-0.10.19-5.el6_8.ppc, gstreamer-plugins-bad-free-devel-docs-0.10.19-5.el6_8 +2
- Red Hat Enterprise Linux Workstation (v. 6) gstreamer-plugins-bad-free-0.10.19-5.el6_8
- Red Hat Enterprise Linux Workstation Optional (v. 6) gstreamer-plugins-bad-free-devel-0.10.19-5.el6_8, gstreamer-plugins-bad-free-devel-docs-0.10.19-5.el6_8, gstreamer-plugins-bad-free-extras-0.10.19-5.el6_8
Fixes 2 records
Priority MEDIUM 41
Integer overflow in the vmnc decoder in the gstreamer allows remote attackers to cause a denial of service (crash) via large width and height values, which triggers a buffer overflow.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04843 · Published 2017-01-23 · Partial fix CWE-190
Priority LOW 39
The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service (out-of-bounds read or write) and possibly execute arbitrary code via a crafted NSF music file.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.02839 · Published 2017-01-23 · Partial fix CWE-125
