CVEvulnerability

CVE-2016-9447

7.8 HIGH Published 2017-01-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-01-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-125, CWE-787

Description

The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service (out-of-bounds read or write) and possibly execute arbitrary code via a crafted NSF music file.

Affected configurations

• gstreamer gstreamer 0.10.0 • gstreamer gstreamer 0.10.1 • gstreamer gstreamer 0.10.2 • gstreamer gstreamer 0.10.3 • gstreamer gstreamer 0.10.4 • gstreamer gstreamer 0.10.5 • gstreamer gstreamer 0.10.6 • gstreamer gstreamer 0.10.7 • gstreamer gstreamer 0.10.8 • gstreamer gstreamer 0.10.9 • gstreamer gstreamer 0.10.10 • gstreamer gstreamer 0.10.11 • gstreamer gstreamer 0.10.12 • gstreamer gstreamer 0.10.13 • gstreamer gstreamer 0.10.14 • gstreamer gstreamer 0.10.15 • gstreamer gstreamer 0.10.16 • gstreamer gstreamer 0.10.17 • gstreamer gstreamer 0.10.18 • gstreamer gstreamer 0.10.19 • gstreamer gstreamer 0.10.20 • gstreamer gstreamer 0.10.21 • gstreamer gstreamer 0.10.22 • gstreamer gstreamer 0.10.23 • gstreamer gstreamer 0.10.24 • gstreamer gstreamer 0.10.25 • gstreamer gstreamer 0.10.26 • gstreamer gstreamer 0.10.27 • gstreamer gstreamer 0.10.28 • gstreamer gstreamer 0.10.29 • gstreamer gstreamer 0.10.30 • gstreamer gstreamer 0.10.31 • gstreamer gstreamer 0.10.32 • gstreamer gstreamer 0.10.33 • gstreamer gstreamer 0.10.34 • gstreamer gstreamer 0.10.35 • gstreamer gstreamer 0.10.36

Related

Weakness · CWE (2)

  • CWE-125 Out-of-bounds Read weakness
  • CWE-787 Out-of-bounds Write weakness

References