SUSE-SU-2017:0210-1
Vulnerability Summary
Timeline
Description
Security update for gstreamer-0_10-plugins-good This update for gstreamer-0_10-plugins-good fixes the following issues: - CVE-2016-9634: Invalid FLIC files could have caused and an out-of-bounds write (bsc#1012102) - CVE-2016-9635: Invalid FLIC files could have caused and an out-of-bounds write (bsc#1012103) - CVE-2016-9636: Prevent maliciously crafted flic files from causing invalid memory writes (bsc#1012104) - CVE-2016-9807: Prevent the reading of invalid memory in flx_decode_chunks, leading to DoS (bsc#1013655) - CVE-2016-9808: Prevent maliciously crafted flic files from causing invalid memory accesses (bsc#1013653) - CVE-2016-9810: Invalid files can be used to extraneous unreferences, leading to invalid memory access and DoS (bsc#1013663)
Affected Systems
- suse•gstreamer-0_10-plugins-good&distro=SUSE Linux Enterprise Desktop 12 SP2
< 0.10.31-16.1
- suse•gstreamer-0_10-plugins-good&distro=SUSE Linux Enterprise Workstation Extension 12 SP2
< 0.10.31-16.1
References (13)
- https://www.suse.com/support/update/announcement/2017/suse-su-20170210-1/
- https://bugzilla.suse.com/1012102
- https://bugzilla.suse.com/1012103
- https://bugzilla.suse.com/1012104
- https://bugzilla.suse.com/1013653
- https://bugzilla.suse.com/1013655
- https://bugzilla.suse.com/1013663
- https://www.suse.com/security/cve/CVE-2016-9634
- https://www.suse.com/security/cve/CVE-2016-9635
- https://www.suse.com/security/cve/CVE-2016-9636
- https://www.suse.com/security/cve/CVE-2016-9807
- https://www.suse.com/security/cve/CVE-2016-9808
- https://www.suse.com/security/cve/CVE-2016-9810