Поиск уязвимостей
Количество 29
Количество 29
BDU:2023-06204
Уязвимость компонента MXF File Parser мультимедийного фреймворка Gstreamer, позволяющая нарушителю выполнить произвольный код
ALT-PU-2023-6895
ALT-PU-2023-6895: package `gst-plugins-bad1.0` update to version 1.20.6-alt2
ROS-20240806-09
Множественные уязвимости gstreamer1-plugins-bad-free
ALT-PU-2023-8747
ALT-PU-2023-8747: package `gstreamer1.0` update to version 1.22.6-alt1
CVE-2023-40474
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of MXF video files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-21660.
CVE-2023-40474
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of MXF video files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-21660.
CVE-2023-40474
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of MXF video files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-21660.
CVE-2023-40474
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vuln ...
SUSE-SU-2024:0307-1
Security update for gstreamer
SUSE-SU-2023:4982-1
Security update for gstreamer
SUSE-SU-2023:4980-1
Security update for gstreamer
SUSE-SU-2023:4368-1
Security update for gstreamer-plugins-bad
SUSE-SU-2023:4361-1
Security update for gstreamer-plugins-bad
SUSE-SU-2023:4360-1
Security update for gstreamer-plugins-bad
SUSE-SU-2023:4355-1
Security update for gstreamer-plugins-bad
SUSE-SU-2023:4350-1
Security update for gstreamer-plugins-bad
SUSE-SU-2023:4271-1
Security update for gstreamer-plugins-bad
GHSA-j2wr-x8cm-vx8p
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of MXF video files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21660.
openSUSE-SU-2023:0409-1
Security update for gstreamer-plugins-bad
SUSE-SU-2023:4597-1
Security update for gstreamer-plugins-bad
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2023-06204 Уязвимость компонента MXF File Parser мультимедийного фреймворка Gstreamer, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.8 | 2% Низкий | около 3 лет назад |
| ALT-PU-2023-6895 ALT-PU-2023-6895: package `gst-plugins-bad1.0` update to version 1.20.6-alt2 | CVSS3: 8.8 | 2% Низкий | около 3 лет назад |
 | ROS-20240806-09 Множественные уязвимости gstreamer1-plugins-bad-free | CVSS3: 8.8 | больше 2 лет назад | |
| ALT-PU-2023-8747 ALT-PU-2023-8747: package `gstreamer1.0` update to version 1.22.6-alt1 | CVSS3: 8.8 | около 3 лет назад | |
 | CVE-2023-40474 GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of MXF video files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-21660. | CVSS3: 8.8 | 2% Низкий | больше 2 лет назад |
 | CVE-2023-40474 GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of MXF video files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-21660. | CVSS3: 5.5 | 2% Низкий | около 4 лет назад |
 | CVE-2023-40474 GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of MXF video files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-21660. | CVSS3: 8.8 | 2% Низкий | больше 2 лет назад |
| CVE-2023-40474 GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vuln ... | CVSS3: 8.8 | 2% Низкий | больше 2 лет назад |
 | SUSE-SU-2024:0307-1 Security update for gstreamer | 2% Низкий | почти 3 года назад | |
| SUSE-SU-2023:4982-1 Security update for gstreamer | 2% Низкий | почти 3 года назад | |
| SUSE-SU-2023:4980-1 Security update for gstreamer | 2% Низкий | почти 3 года назад | |
| SUSE-SU-2023:4368-1 Security update for gstreamer-plugins-bad | 2% Низкий | около 3 лет назад | |
| SUSE-SU-2023:4361-1 Security update for gstreamer-plugins-bad | 2% Низкий | около 3 лет назад | |
| SUSE-SU-2023:4360-1 Security update for gstreamer-plugins-bad | 2% Низкий | около 3 лет назад | |
| SUSE-SU-2023:4355-1 Security update for gstreamer-plugins-bad | 2% Низкий | около 3 лет назад | |
| SUSE-SU-2023:4350-1 Security update for gstreamer-plugins-bad | 2% Низкий | около 3 лет назад | |
| SUSE-SU-2023:4271-1 Security update for gstreamer-plugins-bad | 2% Низкий | около 3 лет назад | |
| GHSA-j2wr-x8cm-vx8p GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of MXF video files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21660. | CVSS3: 8.8 | 2% Низкий | больше 2 лет назад |
| openSUSE-SU-2023:0409-1 Security update for gstreamer-plugins-bad | почти 3 года назад | ||
| SUSE-SU-2023:4597-1 Security update for gstreamer-plugins-bad | почти 3 года назад |
Уязвимостей на страницу