The gstasfdemuxprocessextstreamprops function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory read and crash) via vectors related to the number of languages in a video file.
An invalid memory read was found in gstavidemuxparsencdt.
Upstream bug:
https://bugzilla.gnome.org/showbug.cgi?id=777532
Upstream patch:
https://github.com/GStreamer/gst-plugins-good/commit/4f47835
CVE assignment:
http://seclists.org/oss-sec/2017/q1/284
A use-after-free vulnerability was found in gstminiobjectunref / gsttaglistunref / gstmxfdemuxupdateessencetracks.
Upstream bug:
https://bugzilla.gnome.org/showbug.cgi?id=777503
Upstream patch:
https://github.com/GStreamer/gst-plugins-bad/commit/08723e6
CVE assignment:
http://seclists.org/oss-sec/2017/q1/284
A floating point exception was found in gstriffcreateaudiocaps.
Upstream bug:
https://bugzilla.gnome.org/showbug.cgi?id=777525
Upstream patch:
https://github.com/GStreamer/gst-plugins-base/commit/5d505d108800cef210f67dcfed2801ba36beac2a
CVE assignment:
http://seclists.org/oss-sec/2017/q1/284
An out-of-bounds read in gstdatetimenewfromiso8601string() was found that can be triggered by malformed datetime string.
Upstream bug:
https://bugzilla.gnome.org/showbug.cgi?id=777263
Upstream patch:
https://github.com/GStreamer/gstreamer/commit/9398b7f1a75b38844ae7050b5a7967e4cdebe24f
CVE assignment:
http://seclists.org/oss-sec/2017/q1/284
An endless recursion leading to a stack overflow in gstriffcreateaudiocaps was found.
Upstream bug:
https://bugzilla.gnome.org/showbug.cgi?id=777265
Upstream patch:
https://github.com/GStreamer/gst-plugins-base/commit/ef55c8a
CVE assignment:
http://seclists.org/oss-sec/2017/q1/284
An out-of-bounds heap read was found in qtdemuxparsesamples that can be triggered by specially crafted file.
Upstream bug:
https://bugzilla.gnome.org/showbug.cgi?id=777469
Upstream patches:
https://github.com/GStreamer/gst-plugins-good/commit/99d5d75 https://github.com/GStreamer/gst-plugins-good/commit/1ffef8b
CVE assignment:
http://seclists.org/oss-sec/2017/q1/284
An out-of-bounds heap read in htmlcontexthandleelement was found.
Upstream bug:
https://bugzilla.gnome.org/showbug.cgi?id=777502
Upstream patch:
https://github.com/GStreamer/gst-plugins-base/commit/d894c19
CVE assignment:
http://seclists.org/oss-sec/2017/q1/284
A floating point exception was found in gstriffcreateaudiocaps that can be triggered by specially crafted file.
Upstream bug:
https://bugzilla.gnome.org/showbug.cgi?id=777262
Upstream patch:
https://github.com/GStreamer/gst-plugins-base/commit/81d3ba3fa212bb25fe2ac661993887c4b69af6f1
CVE assignment:
http://seclists.org/oss-sec/2017/q1/284
An out-of-bounds heap read was found gstavidemuxparsencdt.
Upstream bug:
https://bugzilla.gnome.org/showbug.cgi?id=777500
Upstream patch:
https://github.com/GStreamer/gst-plugins-good/commit/32d9f3c
CVE assignment:
http://seclists.org/oss-sec/2017/q1/284
An out-of-bounds read in qtdemuxtagaddstrfull was found that can be triggered by specially crafted file.
Upstream bug:
https://bugzilla.gnome.org/showbug.cgi?id=775451
Upstream patch:
https://github.com/GStreamer/gst-plugins-good/commit/d0949baf3dadea6021d54abef6802fed5a06af75
CVE assignment:
http://seclists.org/oss-sec/2017/q1/284
An invalid memory read in gstaacparsesinksetcaps was found that can be triggered by specially crafted file.
Upstream bug:
https://bugzilla.gnome.org/showbug.cgi?id=775450
Upstream patch:
https://github.com/GStreamer/gst-plugins-good/commit/87a2c140ca54c5128093377e9b25a5c24b346727
CVE assignment:
http://seclists.org/oss-sec/2017/q1/284