Логотип exploitDog
bind:CVE-2023-38103
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-38103

Количество 9

Количество 9

ubuntu логотип

CVE-2023-38103

почти 2 года назад

GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of MDPR chunks. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21443.

CVSS3: 8.8
EPSS: Низкий
redhat логотип

CVE-2023-38103

почти 2 года назад

GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of MDPR chunks. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21443.

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2023-38103

почти 2 года назад

GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of MDPR chunks. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21443.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2023-38103

почти 2 года назад

GStreamer RealMedia File Parsing Integer Overflow Remote Code Executio ...

CVSS3: 8.8
EPSS: Низкий
github логотип

GHSA-w6v4-ppcc-h897

почти 2 года назад

GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of MDPR chunks. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21443.

CVSS3: 8.8
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:3247-1

больше 2 лет назад

Security update for gstreamer-plugins-ugly

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:3226-1

больше 2 лет назад

Security update for gstreamer-plugins-ugly

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:3222-1

больше 2 лет назад

Security update for gstreamer-plugins-ugly

EPSS: Низкий
fstec логотип

BDU:2023-04883

больше 2 лет назад

Уязвимость компонента MDPR мультимедийного фреймворка Gstreamer, позволяющая нарушителю выполнить произвольный код

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2023-38103

GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of MDPR chunks. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21443.

CVSS3: 8.8
5%
Низкий
почти 2 года назад
redhat логотип
CVE-2023-38103

GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of MDPR chunks. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21443.

CVSS3: 8.8
5%
Низкий
почти 2 года назад
nvd логотип
CVE-2023-38103

GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of MDPR chunks. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21443.

CVSS3: 8.8
5%
Низкий
почти 2 года назад
debian логотип
CVE-2023-38103

GStreamer RealMedia File Parsing Integer Overflow Remote Code Executio ...

CVSS3: 8.8
5%
Низкий
почти 2 года назад
github логотип
GHSA-w6v4-ppcc-h897

GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of MDPR chunks. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21443.

CVSS3: 8.8
5%
Низкий
почти 2 года назад
suse-cvrf логотип
SUSE-SU-2023:3247-1

Security update for gstreamer-plugins-ugly

больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2023:3226-1

Security update for gstreamer-plugins-ugly

больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2023:3222-1

Security update for gstreamer-plugins-ugly

больше 2 лет назад
fstec логотип
BDU:2023-04883

Уязвимость компонента MDPR мультимедийного фреймворка Gstreamer, позволяющая нарушителю выполнить произвольный код

CVSS3: 8.8
5%
Низкий
больше 2 лет назад

Уязвимостей на страницу