CVE

Id
102667  
CVE No.
CVE-2017-5847  
Status
Candidate  
Description
The gst_asf_demux_process_ext_content_desc function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving extended content descriptors.  
Phase
Assigned (20170201)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
805527 102667 CVE-2017-5847 MLIST:[oss-security] 20170201 Multiple memory access issues in gstreamer  View
805528 102667 CVE-2017-5847 URL:http://www.openwall.com/lists/oss-security/2017/02/01/7  View
805529 102667 CVE-2017-5847 MLIST:[oss-security] 20170202 Re: Multiple memory access issues in gstreamer  View
805530 102667 CVE-2017-5847 URL:http://www.openwall.com/lists/oss-security/2017/02/02/9  View
805531 102667 CVE-2017-5847 CONFIRM:https://bugzilla.gnome.org/show_bug.cgi?id=777955#c3  View
805532 102667 CVE-2017-5847 CONFIRM:https://github.com/GStreamer/gst-plugins-ugly/commit/d21017b52a585f145e8d62781bcc1c5fefc7ee37  View
805533 102667 CVE-2017-5847 BID:96001  View

Related JVN