Home

CVE-2016-9447

Description

The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service (out-of-bounds read or write) and possibly execute arbitrary code via a crafted NSF music file.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.483

Associated Vulnerability

VulnerabilityOS Platform
Vulnerability CVE-2016-9447 are affected in GStreamer 0.10.36Windows
Gstreamer-plugins-bad-free security update (CESA-2016:2974) gstreamer-plugins-bad-free-0.10.19-5.el6_8.i686.rpmLinux
Gstreamer-plugins-bad-free security update (CESA-2016:2974) gstreamer-plugins-bad-free-0.10.19-5.el6_8.x86_64.rpmLinux
Gstreamer-plugins-bad-free security update (CESA-2016:2974) gstreamer-plugins-bad-free-devel-0.10.19-5.el6_8.i686.rpmLinux
Gstreamer-plugins-bad-free security update (CESA-2016:2974) gstreamer-plugins-bad-free-devel-0.10.19-5.el6_8.x86_64.rpmLinux
Gstreamer-plugins-bad-free security update (CESA-2016:2974) gstreamer-plugins-bad-free-extras-0.10.19-5.el6_8.i686.rpmLinux
Gstreamer-plugins-bad-free security update (CESA-2016:2974) gstreamer-plugins-bad-free-extras-0.10.19-5.el6_8.x86_64.rpmLinux
Gstreamer-plugins-bad-free security update (CESA-2016:2974) gstreamer-plugins-bad-free-devel-docs-0.10.19-5.el6_8.i686.rpmLinux
Gstreamer-plugins-bad-free security update (CESA-2016:2974) gstreamer-plugins-bad-free-devel-docs-0.10.19-5.el6_8.x86_64.rpmLinux
(RHSA-2016:2974) Important: gstreamer-plugins-bad-free security update gstreamer-plugins-bad-free-0.10.19-5.el6_8.i686.rpmLinux
(RHSA-2016:2974) Important: gstreamer-plugins-bad-free security update gstreamer-plugins-bad-free-0.10.19-5.el6_8.x86_64.rpmLinux
(RHSA-2016:2974) Important: gstreamer-plugins-bad-free security update gstreamer-plugins-bad-free-devel-0.10.19-5.el6_8.i686.rpmLinux
(RHSA-2016:2974) Important: gstreamer-plugins-bad-free security update gstreamer-plugins-bad-free-devel-0.10.19-5.el6_8.x86_64.rpmLinux
(RHSA-2016:2974) Important: gstreamer-plugins-bad-free security update gstreamer-plugins-bad-free-devel-docs-0.10.19-5.el6_8.i686.rpmLinux
(RHSA-2016:2974) Important: gstreamer-plugins-bad-free security update gstreamer-plugins-bad-free-devel-docs-0.10.19-5.el6_8.x86_64.rpmLinux
(RHSA-2016:2974) Important: gstreamer-plugins-bad-free security update gstreamer-plugins-bad-free-extras-0.10.19-5.el6_8.i686.rpmLinux
(RHSA-2016:2974) Important: gstreamer-plugins-bad-free security update gstreamer-plugins-bad-free-extras-0.10.19-5.el6_8.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234