Vulnerability CVE-2017-5847
Published: 2017-02-09

Description:
The gst_asf_demux_process_ext_content_desc function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving extended content descriptors.

Type:

CWE-125

 (Out-of-bounds Read)

CVSS2 => (AV:N/AC:L/Au:N/C:N/I:N/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Partial
Affected software
Gstreamer project -> Gstreamer 

 References:
http://www.debian.org/security/2017/dsa-3821
http://www.openwall.com/lists/oss-security/2017/02/01/7
http://www.openwall.com/lists/oss-security/2017/02/02/9
http://www.securityfocus.com/bid/96001
https://bugzilla.gnome.org/show_bug.cgi?id=777955#c3
https://github.com/GStreamer/gst-plugins-ugly/commit/d21017b52a585f145e8d62781bcc1c5fefc7ee37
https://security.gentoo.org/glsa/201705-10
Copyright 2024, cxsecurity.com

 

Back to Top