CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 102660 | CVE-2017-5840 | Candidate | The qtdemux_parse_samples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving the current stts index. | Assigned (20170201) | None (candidate not yet proposed) | View | |
| 102659 | CVE-2017-5839 | Candidate | The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 does not properly limit recursion, which allows remote attackers to cause a denial of service (stack overflow and crash) via vectors involving nested WAVEFORMATEX. | Assigned (20170201) | None (candidate not yet proposed) | View | |
| 102658 | CVE-2017-5838 | Candidate | The gst_date_time_new_from_iso8601_string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a malformed datetime string. | Assigned (20170201) | None (candidate not yet proposed) | View | |
| 102657 | CVE-2017-5837 | Candidate | The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (floating point exception and crash) via a crafted video file. | Assigned (20170201) | None (candidate not yet proposed) | View | |
| 102656 | CVE-2017-5836 | Candidate | The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated as a PLIST_KEY and then triggers an invalid free. | Assigned (20170201) | None (candidate not yet proposed) | View |
Page 412 of 20943, showing 5 records out of 104715 total, starting on record 2056, ending on 2060
