CVE-2016-9447

Severity CVSS v4.0:
Pending analysis
Type:
CWE-125 Out-of-bounds Read
Publication date:
23/01/2017
Last modified:
20/04/2025

Description

The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service (out-of-bounds read or write) and possibly execute arbitrary code via a crafted NSF music file.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:gstreamer_project:gstreamer:0.10.0:*:*:*:*:*:*:*
cpe:2.3:a:gstreamer_project:gstreamer:0.10.1:*:*:*:*:*:*:*
cpe:2.3:a:gstreamer_project:gstreamer:0.10.2:*:*:*:*:*:*:*
cpe:2.3:a:gstreamer_project:gstreamer:0.10.3:*:*:*:*:*:*:*
cpe:2.3:a:gstreamer_project:gstreamer:0.10.4:*:*:*:*:*:*:*
cpe:2.3:a:gstreamer_project:gstreamer:0.10.5:*:*:*:*:*:*:*
cpe:2.3:a:gstreamer_project:gstreamer:0.10.6:*:*:*:*:*:*:*
cpe:2.3:a:gstreamer_project:gstreamer:0.10.7:*:*:*:*:*:*:*
cpe:2.3:a:gstreamer_project:gstreamer:0.10.8:*:*:*:*:*:*:*
cpe:2.3:a:gstreamer_project:gstreamer:0.10.9:*:*:*:*:*:*:*
cpe:2.3:a:gstreamer_project:gstreamer:0.10.10:*:*:*:*:*:*:*
cpe:2.3:a:gstreamer_project:gstreamer:0.10.11:*:*:*:*:*:*:*
cpe:2.3:a:gstreamer_project:gstreamer:0.10.12:*:*:*:*:*:*:*
cpe:2.3:a:gstreamer_project:gstreamer:0.10.13:*:*:*:*:*:*:*
cpe:2.3:a:gstreamer_project:gstreamer:0.10.14:*:*:*:*:*:*:*