CVE-2016-9447: High severity Gstreamer Project Gstreamer vulnerability
Published Jan 23, 2017
·Updated
The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service (out-of-bounds read or write) and possibly execute arbitrary code via a crafted NSF music file.
Affected Software
74 affected components
Gstreamer Project Gstreamer=0.10.0
Gstreamer Project Gstreamer=0.10.1
Gstreamer Project Gstreamer=0.10.2
Gstreamer Project Gstreamer=0.10.3
Gstreamer Project Gstreamer=0.10.4
Gstreamer Project Gstreamer=0.10.5
Gstreamer Project Gstreamer=0.10.6
Gstreamer Project Gstreamer=0.10.7
Gstreamer Project Gstreamer=0.10.8
Gstreamer Project Gstreamer=0.10.9
Gstreamer Project Gstreamer=0.10.10
Gstreamer Project Gstreamer=0.10.11
Gstreamer Project Gstreamer=0.10.12
Gstreamer Project Gstreamer=0.10.13
Gstreamer Project Gstreamer=0.10.14
Gstreamer Project Gstreamer=0.10.15
Gstreamer Project Gstreamer=0.10.16
Gstreamer Project Gstreamer=0.10.17
Gstreamer Project Gstreamer=0.10.18
Gstreamer Project Gstreamer=0.10.19
Gstreamer Project Gstreamer=0.10.20
Gstreamer Project Gstreamer=0.10.21
Gstreamer Project Gstreamer=0.10.22
Gstreamer Project Gstreamer=0.10.23
Gstreamer Project Gstreamer=0.10.24
Gstreamer Project Gstreamer=0.10.25
Gstreamer Project Gstreamer=0.10.26
Gstreamer Project Gstreamer=0.10.27
Gstreamer Project Gstreamer=0.10.28
Gstreamer Project Gstreamer=0.10.29
Gstreamer Project Gstreamer=0.10.30
Gstreamer Project Gstreamer=0.10.31
Gstreamer Project Gstreamer=0.10.32
Gstreamer Project Gstreamer=0.10.33
Gstreamer Project Gstreamer=0.10.34
Gstreamer Project Gstreamer=0.10.35
Gstreamer Project Gstreamer=0.10.36
GStreamer GStreamer=0.10.0
GStreamer GStreamer=0.10.1
GStreamer GStreamer=0.10.2
GStreamer GStreamer=0.10.3
GStreamer GStreamer=0.10.4
GStreamer GStreamer=0.10.5
GStreamer GStreamer=0.10.6
GStreamer GStreamer=0.10.7
GStreamer GStreamer=0.10.8
GStreamer GStreamer=0.10.9
GStreamer GStreamer=0.10.10
GStreamer GStreamer=0.10.11
GStreamer GStreamer=0.10.12
GStreamer GStreamer=0.10.13
GStreamer GStreamer=0.10.14
GStreamer GStreamer=0.10.15
GStreamer GStreamer=0.10.16
GStreamer GStreamer=0.10.17
GStreamer GStreamer=0.10.18
GStreamer GStreamer=0.10.19
GStreamer GStreamer=0.10.20
GStreamer GStreamer=0.10.21
GStreamer GStreamer=0.10.22
GStreamer GStreamer=0.10.23
GStreamer GStreamer=0.10.24
GStreamer GStreamer=0.10.25
GStreamer GStreamer=0.10.26
GStreamer GStreamer=0.10.27
GStreamer GStreamer=0.10.28
GStreamer GStreamer=0.10.29
GStreamer GStreamer=0.10.30
GStreamer GStreamer=0.10.31
GStreamer GStreamer=0.10.32
GStreamer GStreamer=0.10.33
GStreamer GStreamer=0.10.34
GStreamer GStreamer=0.10.35
GStreamer GStreamer=0.10.36
Remediation
Patch Available
Patch Available
Event History
Jan 23, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:59 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-9447?
CVE-2016-9447 has been classified with high severity due to the potential for remote denial of service and arbitrary code execution.
2
How do I fix CVE-2016-9447?
To fix CVE-2016-9447, it is recommended to update GStreamer to the latest version available that addresses this vulnerability.
3
What versions are affected by CVE-2016-9447?
CVE-2016-9447 affects GStreamer versions 0.10.0 through 0.10.36.
4
Can CVE-2016-9447 be exploited remotely?
Yes, CVE-2016-9447 can be exploited remotely through crafted NSF music files.
5
What symptoms may indicate exploitation of CVE-2016-9447?
Symptoms of exploitation of CVE-2016-9447 may include unexpected crashes or performance issues in applications using GStreamer.