Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 9

Количество 9

ubuntu логотип

CVE-2023-38103

больше 2 лет назад

GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of MDPR chunks. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21443.

CVSS3: 8.8
EPSS: Низкий
redhat логотип

CVE-2023-38103

больше 2 лет назад

GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of MDPR chunks. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21443.

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2023-38103

больше 2 лет назад

GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of MDPR chunks. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21443.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2023-38103

больше 2 лет назад

GStreamer RealMedia File Parsing Integer Overflow Remote Code Executio ...

CVSS3: 8.8
EPSS: Низкий
github логотип

GHSA-w6v4-ppcc-h897

больше 2 лет назад

GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of MDPR chunks. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21443.

CVSS3: 8.8
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:3247-1

около 3 лет назад

Security update for gstreamer-plugins-ugly

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:3226-1

около 3 лет назад

Security update for gstreamer-plugins-ugly

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:3222-1

около 3 лет назад

Security update for gstreamer-plugins-ugly

EPSS: Низкий
fstec логотип

BDU:2023-04883

около 3 лет назад

Уязвимость компонента MDPR мультимедийного фреймворка Gstreamer, позволяющая нарушителю выполнить произвольный код

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2023-38103

GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of MDPR chunks. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21443.

CVSS3: 8.8
2%
Низкий
больше 2 лет назад
redhat логотип
CVE-2023-38103

GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of MDPR chunks. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21443.

CVSS3: 8.8
2%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-38103

GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of MDPR chunks. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21443.

CVSS3: 8.8
2%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-38103

GStreamer RealMedia File Parsing Integer Overflow Remote Code Executio ...

CVSS3: 8.8
2%
Низкий
больше 2 лет назад
github логотип
GHSA-w6v4-ppcc-h897

GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of MDPR chunks. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21443.

CVSS3: 8.8
2%
Низкий
больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2023:3247-1

Security update for gstreamer-plugins-ugly

около 3 лет назад
suse-cvrf логотип
SUSE-SU-2023:3226-1

Security update for gstreamer-plugins-ugly

около 3 лет назад
suse-cvrf логотип
SUSE-SU-2023:3222-1

Security update for gstreamer-plugins-ugly

около 3 лет назад
fstec логотип
BDU:2023-04883

Уязвимость компонента MDPR мультимедийного фреймворка Gstreamer, позволяющая нарушителю выполнить произвольный код

CVSS3: 8.8
2%
Низкий
около 3 лет назад

Уязвимостей на страницу