CVE-2016-9809: High severity GStreamer GStreamer vulnerability
Published Jan 13, 2017
·Updated
Off-by-one error in the gsth264parsesetcaps function in GStreamer before 1.10.2 allows remote attackers to have unspecified impact via a crafted file, which triggers an out-of-bounds read.
Affected Software
1 affected component
GStreamer GStreamer<=1.10.1
Event History
Jan 13, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
via NVD·04:59 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-9809?
CVE-2016-9809 has a severity rating that indicates the potential for an out-of-bounds read vulnerability, which can be exploited by remote attackers.
2
How do I fix CVE-2016-9809?
To fix CVE-2016-9809, update GStreamer to version 1.10.2 or later.
3
What causes CVE-2016-9809?
CVE-2016-9809 is caused by an off-by-one error in the gst_h264_parse_set_caps function.
4
Which versions of GStreamer are affected by CVE-2016-9809?
GStreamer versions before 1.10.2, up to and including 1.10.1, are affected by CVE-2016-9809.
5
What types of attacks can CVE-2016-9809 lead to?
CVE-2016-9809 can lead to unspecified impacts due to a crafted file triggering an out-of-bounds read.