CVE-2016-9446
Summary
| CVE | CVE-2016-9446 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2017-01-23 21:59:00 UTC |
|---|
| Updated | 2023-11-07 02:37:00 UTC |
|---|
| Description | The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1 frame vmnc movie that does not draw to the allocated render canvas. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| [SECURITY] Fedora 35 Update: mingw-gstreamer1-plugins-base-1.19.3-1.fc35 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| oss-security - CVE Request: gstreamer plugins |
|
www.openwall.com |
|
| Bug 774533 – Remove vmnc plugin |
CONFIRM |
bugzilla.gnome.org |
Issue Tracking, Patch, Third Party Advisory |
| oss-security - Re: CVE Request: gstreamer plugins |
MLIST |
www.openwall.com |
Mailing List, Third Party Advisory |
| Security: [0day] [PoC] Risky design decisions in Google Chrome and Fedora desktop enable drive-by downloads |
MISC |
scarybeastsecurity.blogspot.de |
Exploit, Technical Description, Third Party Advisory |
| Red Hat Customer Portal |
|
access.redhat.com |
|
| [SECURITY] Fedora 35 Update: mingw-gstreamer1-plugins-base-1.19.3-1.fc35 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| GStreamer Bad Plug-ins 'vmnc/vmncdec.c' Information Disclosure Vulnerability |
|
www.securityfocus.com |
|
| GStreamer plug-ins: User-assisted execution of arbitrary code (GLSA 201705-10) — Gentoo Security |
|
security.gentoo.org |
|
| gstreamer/gst-plugins-bad - 'Bad' GStreamer plugins and helper libraries |
|
cgit.freedesktop.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 282148 Fedora Security Update for mingw (FEDORA-2021-ed54b1128a)
- 710553 Gentoo Linux GStreamer plug-ins User-assisted execution of arbitrary code Vulnerability (GLSA 201705-10)
