CVE

Id
87709  
CVE No.
CVE-2016-10199  
Status
Candidate  
Description
The qtdemux_tag_add_str_full function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted tag value.  
Phase
Assigned (20170201)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
764902 87709 CVE-2016-10199 MLIST:[oss-security] 20170201 Multiple memory access issues in gstreamer  View
764903 87709 CVE-2016-10199 URL:http://www.openwall.com/lists/oss-security/2017/02/01/7  View
764904 87709 CVE-2016-10199 MLIST:[oss-security] 20170202 Re: Multiple memory access issues in gstreamer  View
764905 87709 CVE-2016-10199 URL:http://www.openwall.com/lists/oss-security/2017/02/02/9  View
764906 87709 CVE-2016-10199 CONFIRM:https://bugzilla.gnome.org/show_bug.cgi?id=775451  View
764907 87709 CVE-2016-10199 CONFIRM:https://gstreamer.freedesktop.org/releases/1.10/#1.10.3  View
764908 87709 CVE-2016-10199 BID:96001  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
1526 JVNDB-2016-002299 SaAT Netizen にダウンロードファイル検証不備の脆弱性 SaAT Netizen には、インストール時およびアップデート時におけるダウンロードファイルの検証に関する脆弱性が存在します。 CVE-2016-1203 87709 6.8 5.6 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002299.html  View