CVE

Id
102660  
CVE No.
CVE-2017-5840  
Status
Candidate  
Description
The qtdemux_parse_samples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving the current stts index.  
Phase
Assigned (20170201)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
805478 102660 CVE-2017-5840 MLIST:[oss-security] 20170201 Multiple memory access issues in gstreamer  View
805479 102660 CVE-2017-5840 URL:http://www.openwall.com/lists/oss-security/2017/02/01/7  View
805480 102660 CVE-2017-5840 MLIST:[oss-security] 20170202 Re: Multiple memory access issues in gstreamer  View
805481 102660 CVE-2017-5840 URL:http://www.openwall.com/lists/oss-security/2017/02/02/9  View
805482 102660 CVE-2017-5840 CONFIRM:https://bugzilla.gnome.org/show_bug.cgi?id=777469  View
805483 102660 CVE-2017-5840 CONFIRM:https://gstreamer.freedesktop.org/releases/1.10/#1.10.3  View
805484 102660 CVE-2017-5840 BID:96001  View

Related JVN